last executing test programs: 36m25.336432897s ago: executing program 32 (id=735): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) prlimit64(r1, 0x7, 0x0, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3008c94, &(0x7f0000000400)={[{@dioread_lock}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7bf, &(0x7f0000000e00)="$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") ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)) r6 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r6}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0x1) 31m46.717865528s ago: executing program 5 (id=1593): r0 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1c23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffa, 0x9, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc9, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002207070000a100a700fffa"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0xea, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd8, 0x1, 0x1, 0x5, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x2, 0x6, 0x0, 0x3, {{0xb, 0x24, 0x6, 0x0, 0x0, "62d4f43f38bf"}, {0x5, 0x24, 0x0, 0xfa}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x5, 0x4, 0xea}, [@dmm={0x7, 0x24, 0x14, 0x1, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x9, 0x6, 0xff, 0x0, 0x6d}, @mdlm_detail={0x7f, 0x24, 0x13, 0x0, "e9cce6835b49b684a0d6a41f89467b07b416c7354422f962c1f41c518adbeb6d67c6bf52186f34df244063e81787c8023d44714cb05de6e8c27c03d9c797ca5e886b6048fcc610c218c35549327b2cac4050f800054790eb52228240035c46cfee3ea5e58052f4cbeb09ea9c6bc023640bbae82cfbb44bfa2af271"}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x3}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x4c, 0x6, 0x13}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0x8, 0x80}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x3, 0x6, 0xa, 0x20, 0x40}, 0x1f, &(0x7f0000000040)={0x5, 0xf, 0x1f, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x8, 0xc, 0x800}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x1, 0x3, 0x9}]}, 0x4, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x40f}}, {0xb2, &(0x7f0000000340)=@string={0xb2, 0x3, "0565b2ea36f8db596c5dcfefd891c76ecd89664fee954ae3028603e85cfc8b6225a6c29af098ab326f48f40ee7b1343417a211b3a16a568de50b51e9453559624d2bb7bc85670991c1766d4ad9f8b9160b980abda67e2ddda231608b26432bfb764770a1faea188fa8347f80270f5702bd788dc1d23e819d49cb63ec36a04a647adda3a124615e572eadfb43c98a3855ae81735d1a67d452c1812554ccc6a9a5343699caed9b67faa45c1c941016dac9"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x4c0a}}, {0xe8, &(0x7f0000000400)=@string={0xe8, 0x3, "690b092d638bd16a1fda604f8352bc5a336370a3431d753c164f6ca0b13e72be5a988ba284cc0f8003b4cda85591cd3681c37824ab3512ca7f0db766a2bf1c084dbaedaf050a965df6e8cf08a1d727c9d6bdc16da53228d65fe5bc106c478b536343285f3c0fb93dbec7e21fba535fbff6130a3442056f8051c649ec4835892139520c03f41f2b89c7338b373c114154076ee60bfe81d77232c33a7ed1c6059866ac9bedd5679574f52b0e44ed30baa1956b4a838ee38dcf39a3372f8adc59926568ea8c5adc840f58205ba9e1e5469273ae4e63a0aead59cf4e65b1565834f48b2e1cadba95"}}]}) syz_open_dev$hiddev(0x0, 0x92, 0x408000) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001980)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)}) 31m43.622870088s ago: executing program 5 (id=1610): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x80000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r3}, 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r5 = getuid() bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500352583a62a44000056"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = getgid() syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}}, 0x0, 0x0, &(0x7f0000002140)) syz_fuse_handle_req(r4, &(0x7f0000002180), 0x2000, &(0x7f0000004180)={&(0x7f0000004240)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) ioctl$RTC_SET_TIME(r7, 0x4024700a, &(0x7f0000000180)={0x2, 0xac, 0x0, 0x3, 0x0, 0xa8, 0x0, 0x2, 0x1}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 31m42.226658005s ago: executing program 5 (id=1611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xb8, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x3}, @ETHTOOL_A_CHANNELS_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1000}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x9}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}]}, 0xb8}}, 0x800) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x10000}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x800, 0x0, 0x3, 0x41298, r3, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5, 0xf}, 0x50) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 31m41.068002488s ago: executing program 5 (id=1616): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000050000000600000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000d43e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_setup(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x5, 0x0, &(0x7f0000000280)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) ioprio_get$pid(0x1, r3) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r9 = dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r10 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x3, 0x5e, @dev={0xfe, 0x80, '\x00', 0x1d}, @mcast1, 0x10, 0x700, 0x4, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 31m39.988853478s ago: executing program 5 (id=1619): fsopen(0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000080)={[{@quota}, {@debug}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt}, {@dont_hash}, {@subj_user={'subj_user', 0x3d, ']$@j\xb5!}.,/'}}, {@hash}, {@hash}, {@uid_lt}, {@audit}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f00007f6000/0x8000)=nil, &(0x7f00005af000/0x2000)=nil, &(0x7f00005e7000/0x2000)=nil, &(0x7f0000723000/0x1000)=nil, &(0x7f0000463000/0x4000)=nil, &(0x7f000045a000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000560000/0x2000)=nil, &(0x7f000059f000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00003b1000/0x1000)=nil, &(0x7f0000000300)="32a5661ff8a4de5f36f64109434aad4102f8cd171a47eb005a35205cda5ccbce3ced52116fbad4c9c7340c866d18746f293d20ddf26e7c87b7bf948f5ce155310672e04b25c7f1c6863235f1c23f04388e9f8a694cb7dc", 0x57}, 0x68) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000104000000000000000000254065", @ANYRES32=0x0], 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) 31m36.106588844s ago: executing program 5 (id=1629): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r5, &(0x7f0000000080)="4f10", 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x8042, 0x0) pwrite64(r6, &(0x7f0000000000)="c0", 0x1, 0x8080c61) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) r7 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r7, 0x0, 0x8, 0x0, 0x0) sendmmsg$inet(r7, &(0x7f00000053c0)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\b\x00\x00\x00(\x00', 0x6}], 0x1}}], 0x1, 0x4800) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) open(0x0, 0x169242, 0x10) socket$inet_udp(0x2, 0x2, 0x0) 31m20.79992511s ago: executing program 33 (id=1629): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r5, &(0x7f0000000080)="4f10", 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x8042, 0x0) pwrite64(r6, &(0x7f0000000000)="c0", 0x1, 0x8080c61) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) r7 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r7, 0x0, 0x8, 0x0, 0x0) sendmmsg$inet(r7, &(0x7f00000053c0)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\b\x00\x00\x00(\x00', 0x6}], 0x1}}], 0x1, 0x4800) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) open(0x0, 0x169242, 0x10) socket$inet_udp(0x2, 0x2, 0x0) 22m42.205595683s ago: executing program 1 (id=2982): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r4, &(0x7f0000000080)="4f10", 0x2) sendfile(r4, r3, 0x0, 0x3ffff) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) open(0x0, 0x169242, 0x10) 22m39.649438202s ago: executing program 1 (id=2990): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000050000000600000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000d43e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_setup(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) timer_create(0x5, 0x0, &(0x7f0000000280)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) ioprio_get$pid(0x1, r3) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r9 = dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r10 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x3, 0x5e, @dev={0xfe, 0x80, '\x00', 0x1d}, @mcast1, 0x10, 0x700, 0x4, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 22m38.211368861s ago: executing program 1 (id=2994): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100001"], 0x48}}, 0x0) 22m37.781763889s ago: executing program 1 (id=2995): r0 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1c23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffa, 0x9, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc9, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002207070000a100a700fffa"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0xf0, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xde, 0x1, 0x1, 0x5, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x2, 0x6, 0x0, 0x3, {{0xb, 0x24, 0x6, 0x0, 0x0, "62d4f43f38bf"}, {0x5, 0x24, 0x0, 0xfa}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x5, 0x4, 0xea}, [@dmm={0x7, 0x24, 0x14, 0x1, 0x2}, @ncm={0x6, 0x24, 0x1a, 0x1, 0xc}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x9, 0x6, 0xff, 0x0, 0x6d}, @mdlm_detail={0x7f, 0x24, 0x13, 0x0, "e9cce6835b49b684a0d6a41f89467b07b416c7354422f962c1f41c518adbeb6d67c6bf52186f34df244063e81787c8023d44714cb05de6e8c27c03d9c797ca5e886b6048fcc610c218c35549327b2cac4050f800054790eb52228240035c46cfee3ea5e58052f4cbeb09ea9c6bc023640bbae82cfbb44bfa2af271"}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x3}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x4c, 0x6, 0x13}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0x8, 0x80}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x3, 0x6, 0xa, 0x20, 0x40}, 0x1f, &(0x7f0000000040)={0x5, 0xf, 0x1f, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x8, 0xc, 0x800}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x1, 0x3, 0x9}]}, 0x3, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x4c0a}}, {0xe8, &(0x7f0000000400)=@string={0xe8, 0x3, "690b092d638bd16a1fda604f8352bc5a336370a3431d753c164f6ca0b13e72be5a988ba284cc0f8003b4cda85591cd3681c37824ab3512ca7f0db766a2bf1c084dbaedaf050a965df6e8cf08a1d727c9d6bdc16da53228d65fe5bc106c478b536343285f3c0fb93dbec7e21fba535fbff6130a3442056f8051c649ec4835892139520c03f41f2b89c7338b373c114154076ee60bfe81d77232c33a7ed1c6059866ac9bedd5679574f52b0e44ed30baa1956b4a838ee38dcf39a3372f8adc59926568ea8c5adc840f58205ba9e1e5469273ae4e63a0aead59cf4e65b1565834f48b2e1cadba95"}}]}) syz_open_dev$hiddev(0x0, 0x92, 0x408000) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001980)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)}) 22m35.492115163s ago: executing program 1 (id=3004): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r5, &(0x7f0000000080)="4f10", 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x8042, 0x0) pwrite64(r6, &(0x7f0000000000)="c0", 0x1, 0x8080c61) sendfile(r5, r4, 0x0, 0x3ffff) 22m34.11912319s ago: executing program 1 (id=3006): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r5, &(0x7f0000000080)="4f10", 0x2) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) open(0x0, 0x169242, 0x10) socket$inet_udp(0x2, 0x2, 0x0) 22m18.758715027s ago: executing program 34 (id=3006): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r5, &(0x7f0000000080)="4f10", 0x2) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) open(0x0, 0x169242, 0x10) socket$inet_udp(0x2, 0x2, 0x0) 20m55.150267774s ago: executing program 3 (id=3251): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x22, &(0x7f0000000180)=0xd, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) close(r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x66) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_TSC_KHZ_vm(r4, 0xaea2, 0x10) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000026000186"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r6) getsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000340)={"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"}) 20m54.558614166s ago: executing program 3 (id=3256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000001000000000000000000000061181c000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sock=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x30, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0xc, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000340000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r9, &(0x7f0000000c40)) read$FUSE(r9, &(0x7f00000020c0)={0x2020}, 0x2020) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r11, &(0x7f00000008c0), &(0x7f0000000000)=@udp6, 0x1}, 0x20) close(r0) 20m54.540670836s ago: executing program 3 (id=3257): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x80000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r3}, 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r5 = getuid() bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500352583a62a44000056"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = getgid() syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}}, 0x0, 0x0, &(0x7f0000002140)) syz_fuse_handle_req(r4, &(0x7f0000002180), 0x2000, &(0x7f0000004180)={&(0x7f0000004240)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) ioctl$RTC_SET_TIME(r7, 0x4024700a, &(0x7f0000000180)={0x2, 0xac, 0x0, 0x3, 0x0, 0xa8, 0x0, 0x2, 0x1}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 20m53.356521599s ago: executing program 3 (id=3261): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000198, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000800000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1e}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x58}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x81, 0x4, 0x5c, 0x800}, {0xc, 0x81, 0x9, 0x511043eb}, {0x100, 0x92, 0x10, 0x4}, {0xff44, 0x8c, 0x81, 0x7}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x48) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x10, 0x80000006, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000fba4f7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, 0x0, 0x0) syz_fuse_handle_req(r7, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x4, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000002180)='./file0\x00', &(0x7f0000002200)=ANY=[@ANYBLOB="ed"]) 20m51.519141925s ago: executing program 3 (id=3263): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000540)={&(0x7f0000000300), 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x38, 0x4, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004001}, 0x10000080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f00007f6000/0x8000)=nil, &(0x7f00005af000/0x2000)=nil, &(0x7f00005e7000/0x2000)=nil, &(0x7f0000723000/0x1000)=nil, &(0x7f0000463000/0x4000)=nil, &(0x7f000045a000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000560000/0x2000)=nil, &(0x7f000059f000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00003b1000/0x1000)=nil, 0x0}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = syz_io_uring_setup(0x3fed, &(0x7f0000000380)={0x0, 0x0, 0x800, 0x0, 0x4}, &(0x7f0000000000), &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r5, 0x2000012, 0xffe, 0x0, &(0x7f00000005c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_register$IORING_UNREGISTER_FILES(r4, 0x3, 0x0, 0x0) 20m51.391969778s ago: executing program 3 (id=3265): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x80000}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = getgid() syz_mount_image$fuse(&(0x7f0000002040), 0x0, 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r3}}, 0x0, 0x0, &(0x7f0000002140)) syz_fuse_handle_req(r2, &(0x7f0000002180), 0x2000, &(0x7f0000004180)={&(0x7f0000004240)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000180)={0x2, 0xac, 0x0, 0x3, 0x0, 0xa8, 0x0, 0x2, 0x1}) 20m51.323566528s ago: executing program 35 (id=3265): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x80000}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = getgid() syz_mount_image$fuse(&(0x7f0000002040), 0x0, 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r3}}, 0x0, 0x0, &(0x7f0000002140)) syz_fuse_handle_req(r2, &(0x7f0000002180), 0x2000, &(0x7f0000004180)={&(0x7f0000004240)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000180)={0x2, 0xac, 0x0, 0x3, 0x0, 0xa8, 0x0, 0x2, 0x1}) 11m8.803310421s ago: executing program 6 (id=6289): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$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") socket$nl_route(0x10, 0x3, 0x0) 11m8.145362693s ago: executing program 6 (id=6302): r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) write$selinux_context(r0, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 11m8.083990444s ago: executing program 6 (id=6303): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x301000) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x200000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}], [{@obj_type={'obj_type', 0x3d, 'subj_role'}}]}}) 11m7.996062276s ago: executing program 6 (id=6308): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) 11m7.995893426s ago: executing program 6 (id=6310): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0xfc, 0x0, 0x1, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) 11m7.899811608s ago: executing program 6 (id=6312): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000180)=ANY=[@ANYBLOB="308c800001000000"]) 11m7.81603914s ago: executing program 36 (id=6312): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000180)=ANY=[@ANYBLOB="308c800001000000"]) 11m0.191222237s ago: executing program 8 (id=6505): listen(0xffffffffffffffff, 0x5) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11m0.176268777s ago: executing program 8 (id=6508): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 11m0.02177255s ago: executing program 8 (id=6511): syz_open_procfs(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) pidfd_getfd(r4, r4, 0x0) 10m59.844138594s ago: executing program 8 (id=6512): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000100)={[{@quota}]}, 0x1, 0x441, &(0x7f00000009c0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0xc40, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000080)=0x3f) copy_file_range(r0, 0x0, r0, &(0x7f00000004c0)=0xae8, 0x863, 0x0) 10m59.579871129s ago: executing program 8 (id=6520): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92344f242b416ae9eeefc0e9c60ebab1c176bfdbb4ddffffff7f82dc2b938189a7ca02f732e4c2eab72bf40c0682fd0a0c4ac106b29e220dc28d0072599456d4c4e6f3fe684ab8373bb4df9d72876ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb39df9858037458a4ca037604007600b6be484e4c9517af216bd8ed42f7dd5adb8e49f4a94608c9a20819e02fc22e6be45574d4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9dfc1adafd1e5a3e7f2e898961cb43e438c4e41ae43ea118e14ffffffffe4b8a80366ce5401ec61921a1b529cc8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa228504e4afd8c1cc3eb215ba22f43115f4d39dc7beedb130d9f2be90133a4500000058b8c9370634060105baa664953514605fba3973aa021945b985a8a66e0200000057033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bc0400001000000000ff8d01006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11edb6b3cc425fe203d2f2655a76865c2c34e2470fcfb1248c0add5431a7fbcb0ef4f60109af93a09fab1daae4b518d7a5d95a017864487367d6bab101446ebfe3fdeed7ee7bb0749cacf56cf27409c60fca2e0004000000000000a9cb6f4a78444986f9b1ab61f9dab53038010000004abbfc59d6d1b18fe380df4bf024f120bd755d82033f2fb7d8fc9e0de834f7646c8dd27da1297d0c77b294e097e293db7f002c0024ab2fb4d32972cba6f49051cec1ff6f16231bbb90a2d201a500000000000000007700b06fa191ebd3a0c2ef0058ffebd7cc4cf80f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f8107671141ffffffe0c7d8e94a27a06a4e3d9acee835fd0571e5bbb3e6d2b5eba505000000968983811f832dc5390f83e817c64ac4f1f0d0504255c22ee8674053d0e160e5255366139bbe5863e23c3dd42d21f542816edf56a93d0a7e6f08f9ffffff64875fea6ff57ba6ae25c5e8ca4f78d5ce4ba01308243b08f1caa46be5244d64f8e875857f083144c642f71cdc8e5634c1360c056430fe77ee7ed7ac1f9743786b2fb8e0fcfcc3d36c93230b7b059bc295aa0e38ff07edc3492b96e73d2060acfd8145e4a5851bc4d6fdc5ad939d7795f3879baa88bd194d48e50c84892c97c800d156b059a718f6b10274b077a710f27ab8ee953de70ea860b74a0f3c3dc11177b11cc2e62a95f1ecf607a8dc38e525f415a1bd46b38845ebca04061bacbf627f7975fe449678fee48f83b5989543729e3600000000bc86cd51704f309130f534741377ea7b7bea3c46c0c4c4b7c27c5d057d95ac85a41cdcee8e6fa31f7d2137ed1fb4b21c13b9a2c5e3f7c9ef9e45a35adbf0b9312be929863f000000000000004a82bc080de1f87808d0711dd76f2977ca7f2684bfa5c14a0cd6f1f561e34e4e8e51e81d4a355a6a2bb0cfb284fcfde9015769b9ee2c8ff10e934847604d930f62924d0562ce17f6dadf5053ed8f33092a41bb46e1878c5295fecc27f9c6d1f62da58c0002ea00000000009aa38a05e70591d5cdab1c488ef3c1984c7c0a566cfc2a080000009ec206a54fb49056a555414178ef00d8b8f3c59f01eb5d83415994efcc6ec4b3c275cd6b1b5ff82ef7d7abb1d218e7a1d0afa285706841aac9ccc89df41c39dd58dd70569dde45f8adeaad7d3328fbb6e279f745d2872f0208635e465ca443a6a64c7803760880af23fb3f430a5d11fffc96dd13b951642f1433f65b4e170a62a5f7b7d0f9d5cef0d17289c43d4aee0001f7a343899434594cc23e1c864164e130754b337e560f285dc670a31241bf657babf0615b85dc200a10294b7d5885b43ac62fc7f97a85586168483427072a535f2c7481ec261c00f725de74e48d9a86f7d4a5d28da3f099ca3e6472b9d7c86d961f525f799b4517141f018af0673b8296f867eca1ec07be11bc497a6f7d2b752bcf77c2908b64630ed5a0c2261bc2d5de6ee174534b8dfc0432ab6bbcf296d36807544aa7c3d3301fe227b713a371414c98695e559f9cbf6b046184064a5f24a4cc6f41f21fc24a3ad7d20a89e00a9dc99a40f890869d35fba3ce6f297661d3f8ba21c65badf55d1859581f9e7ef3e2693b46a8fc85be061ce79aa2832c04dc04de8b6536123b24be2ef80eb06b2db900fb30596c1574bda31f81d61ccfd58080d2330b9c7b535aed87b5d17d48c32daffead3414b91603e250eeedc7d601000000037426f643797be3e93da96b5643d3feed0b7c885d06006b830d7cbf31523d753cf27522f5142dcc84a9e48a07518f0142167abf5d6685d09945cbc778bcc3e7dcfaee5d9c1689a3bafc0d3b51b5a3bfd6007954c36d532960964183842601e5364ecb6ad9168040388c7640bfa2f88643de7eebf4da8d1c3e76daace5217761d933d06bbe9609fcf5971aa1e77c3123910e72daaadd8878ad468eabaf78a96012a4ada1a9cd217fb2a0da2d521454ea9e8fcd3b5badfd6f00003a73345b841d04a02bf441955b932c59608a555bc44873272812e0fb874618a0b56b4cf44990f60000000000000000000000b20000da0ca67905e877893646d185a75582f866785af6b0149e336c31fb177e3e85f4c60cbbde4ce6ea73a95f434328620fa493937386ad2e2a0d60eb815aa05c33e02c32276dab36d14c63af66a31409ab2a403ec3c7a4e07bd745efa2835a8c932f22aa6da40af9bcdf808b916bc8deb37d5b8c422b65c42d17e61751c561ce775a31b52703d398d52694cfbb7d2b3791b030093b321d9f16b2f06676cf94d75cbba6491ae0b5a16ce92320321314d8d2e88d1cd7e7b1216bdaecba309a38e107103e649d46958cc6ba2d660dd41b78d832beb7206ae01508377273ea96e40760410aeed1866971e04f578e9d856d01000000045aea928f5f669be0636dc3f34f90c34531735f271527412d1ae755a9243da523d713071f9370b509a34eeb46415b2f0d271a7072cbd17e293f20132e6c15756e92776c6a0d7c3a9f512ce17edf3f1ea190853bbf93e220a6ce968b79d504c057000e7d8f8249a8158e68a90bbea8bfab2bd3045b9c790984c6fb65fd7887bd8bfcbe663df6b7770000f58fbad41e6eee5c9595950c4172b9c925403b2f99bbf3cb1981b90d14bded8eae35e08278020a1ec7f508628056fd3d408a02a1cf8594bcbb21a88f477673442804f714212dedd245b9f563b5352fe460a30489b1b6a6d37daead86151492f7fd4b5c64007b68a1b04027eac124478a2ef7f59fe472795785de83578cb96334e0f7c1370dc397d3aa42d937b5718b7610cdcdfe104db7801ec74980b8b111a2748321f81512e4204eb2b024b9fc9e0f257f8c6037b93b2caa236d4354b32434d5a6b01e00000000000000000000000000000000000000d3a54ccd6e13a966801e9341260d6cbce5fe03999214462cbaa297448677ab659102d0f430fbeae119a7ef2e962d2829d4dd2201c4b30d491269594c88252fbd09aced90609851bd9e5c307e7e0d39e73579c1f3563eff1a6237d3699f61acdc8e36010d76093ddd227df1c4181b0a0c4543b4249e9ff2f5e8b5e0ba2048d542de40f643fda4036124b8feb2dd45d0fa52300518c8052cc09ad73f89734fce82cc627356aa2c651ed2644f34cfbc32e8b29cf29e895e43b473ddb9a43421b4b25f8bbce8e2d7cb8547d156d5972021ae4c9e30f85413276ddebde55999d2ec3c524632b74d703147ba09e0dcb26c4b89636d28428b67e955f53bfd0c9eebf33a260a9b2647726795617a9d170000000000000000000000000767003cacbcd49d0f7ba330f3b788ad4cf448e89c48c32915b1c356e3814621f166d55edb985cb1c3224652996c492c6249af22aa673ddf67d75325652cc6d74b00df9cc0012bc725b1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="b0ff04c66b0d698cb89e2fe086dd1f74ffff06000000ff05001000000000ac14140746647b7954c4c06b580febc28eb143d0f6c0bad62f67a04402ba4125c7024f63fdb0b6c8ee826b4dfe6042a2f057c66cad677d850ea9928bcfcb47e585e427746ed3b27c40060cbd030a6d675c9926af53cd3085b24f9b7a486775c4f284f8c5a572ca115bce90c0ee9d4e7a07f5f1518092cb1f156694036f6618a59196631e6303fd5307d1112601d3641c9492f7dc3503416836b14590c53b1fc1ac149b70cc1142d6bc57fc3a76839fa2f96878b520fedfb9f64d81584a2e85ab4f6ec718b02d78f2ebf04e6b3b94610a21616181629a03c3dc0bf05e0a71f887833b81db7a10bc53259cb80716f6804934a411d424c1db98d454be1adb2776fdbb92b299d3b80af6987a871b4549fdb4c8297ee31ad925c8b0fb1a9d2589b08ed52602cbc26b56df71201bc4ea8621c56f33d251c1d4589af2dcd78fbb4e34bde02cb3920a30cee9489ee72c3e19304c16c2110e1839712d484b80abe77786a7e2ba834874a4e16b93dd07297554a06c2ad2c906f8ebb1db8730df096709184728d48f0a806696bd0d4b12d0064b933d9675353dae77fe8419451f85da63be78b70ca2a84a77f572d9f289d4313e6f6039fe756ac13a5d08838315dff44cda433cc7bc6b77449f8c", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 10m59.032065049s ago: executing program 8 (id=6528): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000400)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x56f, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x142) fsetxattr$system_posix_acl(r0, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {0x1, 0x5}, [], {0x4, 0x3}, [{0x8, 0x2}], {0x10, 0x6}, {0x20, 0x1}}, 0x2c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 10m58.898407892s ago: executing program 37 (id=6528): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000400)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x56f, &(0x7f00000004c0)="$eJzs3c9vHFcdAPDvjH82SesEeoAKSIBCQFHW8aaNql5aLiBUVUJUHBCH1Ngby2Q3G7LrUptIuH8DSCBxgj+BAxIHpJ44wIkjEgdAlANSgYgqRuph0MyO1669Jou93m12Px9pMj/ezHzf283Me367Oy+AiXUpIrYjYjYiXo+IhXJ7Uk7xcmfK93v44P7KzoP7K0lk2Wv/TIr0fFtxwHy5f0ScLc85HxFf/0rEt5PDcVubW7eX6/XavXJ9sd24u9ja3Lq63lheq63V7lSrN5ZuXHvh+vPVgZX1YuMX7355/ZVv/PpXn3zn99tf/H6erXNlWrccA9Yp+kw3Tm46Il45jWAjMFXOZ0ecD44njYiPRMRniut/IaaK/50AwDjLsoXIFvavAwDjLi36wJK0EhFpWjYCKp0+vKfjTFpvttpXbjU37qx2+srOx0x6a71eu3Zh7o/fLXaeSfL1pSKtSC/WqwfWr0fEhYj40dwTxXplpVlfHU2TBwAm3tn99X9EvDeXppVKX4f2+FQPAHhszI86AwDA0Kn/AWDyqP8BYPL0Uf+XH/Zvn3peAIDh6O/vf9/3A4Bxov8fACaP+h8AJsrXXn01n7Kd8vnXq29sbtxuvnF1tda6XWlsrFRWmvfuVtaazbXimT2NR52v3mzeXXouNt5cbNda7cXW5tbNRnPjTvtm8Vzvm7WZoZQKAPhfLlx8+w9JRGy/+EQxxb6xHNTVMN7SAe4FPF6mTnKwBgI81oz2BZOrryq8aCT89tTzAoxGzx/3zPdc/KCf/B9BfM8IPlQuf7z//n9jPMN4OdCz/342qowAQ3e8/v+XBp4PYPiO3f//58HmAxi+LEsOjvk/200CAMbSCb7Cl/1gUI0QYKQe9XDPgXz+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGPmXER8J5K0UowFnub/ppVKxJMRcT5mklvr9dq1iHgqLkbEzFy+vrR78HujzTsAcFzp35Ny/K/LC8+eO5g6m/xnrphHxPd++tqP31xut+8t5dv/1d0+tzt8WHXvuBOMKwgA9O+v/exU1N/Vcr60t/3hg/sru9Mp5vGQd7/UHXx0ZefB/WLqpExHlmVZxHzRljjz7ySmy2PmI+KZiJgaQPzttyLiY73KnxR9I+fLkU/3x48y9pNDjZ9+IH5apHXm+cv30QHkBSbN2/n95+Ve118al4p57+t/vrhDnVxx/5uP2L337eyLP11GmuoRP7/mL/Ub47nffPXQxmyhk/ZWxDPTveIn3fjJEfGf7TP+nz7xqR++dERa9rOIy9E7/v5Yi+3G3cXW5tbV9cbyWm2tdqdavbF049oL15+vLhZ91Iu7PdWH/ePFK08dlbe8/GeOiN95588eKP9s99jP9Vn+n7//+rc+vbc6dzD+Fz7b+/1/uojY+/XP68TP9xl/+cwvjxy+O4+/ekT5H/X+X+kz/jt/21rtc1cAYAham1u3l+v12r0TLeR/hQ7iPIcW8iz2t/Nuc/FkQf8SxcLey5JEEsc+4UzvpLwx1tfhp/WqnvrCdLetONgzfzM/45CLkw68FMdZiPPlwsNhBR3dPQkYjr2LPiJ+N+rcAAAAAAAAAAAAAAAAvQzjN0yjLiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADj678BAAD//2PAxWs=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x142) fsetxattr$system_posix_acl(r0, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {0x1, 0x5}, [], {0x4, 0x3}, [{0x8, 0x2}], {0x10, 0x6}, {0x20, 0x1}}, 0x2c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 28.424754721s ago: executing program 7 (id=9865): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_clone(0x0, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r3}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 24.582648455s ago: executing program 7 (id=9874): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB="00000000000000e9a07c691a4963733100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4040011}, 0x400c0) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getrlimit(0xf, &(0x7f0000000040)) getpid() 23.668814563s ago: executing program 7 (id=9880): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) syz_usb_connect$uac1(0x0, 0xab, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x0, 0x70, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x8, 0x3, 0x0]}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x101, 0x6, 0x0, 0x1000, 0x4, 0xff}, @input_terminal={0xc, 0x24, 0x2, 0x8, 0x201, 0x3, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2, 0x0, 0x85}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x3, 0x7, 0x3, '\x00\x00\x00\x00\x00'}, @as_header={0x7, 0x24, 0x1, 0x28, 0xc, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9, 0x0, 0x0, {0x7, 0x25, 0x1, 0x80, 0xfe, 0x7}}}}}}}]}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(r2, 0xc, &(0x7f0000000000)={0x3, 0xb}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 17.258967237s ago: executing program 7 (id=9891): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB="00000000000000e9a07c691a4963733100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4040011}, 0x400c0) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getrlimit(0xf, &(0x7f0000000040)) getpid() 15.354307763s ago: executing program 7 (id=9898): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) syz_usb_connect$uac1(0x0, 0xad, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x3, 0x1, 0x0, 0x70, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9}, [@feature_unit={0xb, 0x24, 0x6, 0x0, 0x0, 0x2, [0x8, 0x0]}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x101, 0x6, 0x0, 0x1000, 0x4, 0xff}, @input_terminal={0xc, 0x24, 0x2, 0x8, 0x201, 0x3, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2, 0x0, 0x85}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x3, 0x7, 0x3, '\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @as_header={0x7, 0x24, 0x1, 0x28, 0xc, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9, 0x0, 0x0, {0x7, 0x25, 0x1, 0x80, 0xfe, 0x7}}}}}}}]}}, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="81000000000000000000000000000000feffffff", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) prlimit64(r2, 0xc, &(0x7f0000000000)={0x3, 0xb}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 14.675138426s ago: executing program 0 (id=9901): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) syz_usb_connect$uac1(0x0, 0xab, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x0, 0x70, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x8, 0x3, 0x0]}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x101, 0x6, 0x0, 0x1000, 0x4, 0xff}, @input_terminal={0xc, 0x24, 0x2, 0x8, 0x201, 0x3, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2, 0x0, 0x85}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x3, 0x7, 0x3, '\x00\x00\x00\x00\x00'}, @as_header={0x7, 0x24, 0x1, 0x28, 0xc, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9, 0x0, 0x0, {0x7, 0x25, 0x1, 0x80, 0xfe, 0x7}}}}}}}]}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) prlimit64(r2, 0xc, &(0x7f0000000000)={0x3, 0xb}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 13.808807253s ago: executing program 2 (id=9905): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x22c81, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x283fe, 0x0) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FICLONE(r2, 0x40049409, r1) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x40, &(0x7f0000000140)={[{@cache_strategy_disabled}, {@noacl}, {@noacl}, {@dax_never}, {@nouser_xattr}]}, 0x1, 0x177, &(0x7f0000000240)="$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") ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') socket$netlink(0x10, 0x3, 0x5) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r6 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r6, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xc2c}) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r8, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.671147236s ago: executing program 9 (id=9906): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000050000000600000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000d43e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_setup(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x5, 0x0, &(0x7f0000000280)) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) ioprio_get$pid(0x1, r2) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r9 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x3, 0x5e, @dev={0xfe, 0x80, '\x00', 0x1d}, @mcast1, 0x10, 0x700, 0x4, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 12.726683754s ago: executing program 4 (id=9907): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="0035000000000006000000000000800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file1\x00', 0x61000, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 12.711943894s ago: executing program 4 (id=9908): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000100001040000000000000000000002", @ANYRES32=0x0, @ANYBLOB="0000000002000100240012800b00010065727370616e00001400028006000200300000"], 0x44}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40041}, 0x4000054) 12.655078926s ago: executing program 2 (id=9909): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB="00000000000000e9a07c691a4963733100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4040011}, 0x400c0) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getrlimit(0xf, &(0x7f0000000040)) getpid() 12.573670047s ago: executing program 9 (id=9910): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x5, 0x4e21, 0x0, 0x2, 0x20, 0x0, 0xff}, {0x7, 0x3, 0xfffffffffffffff9, 0xfffffffffffffffd, 0x80, 0x0, 0x0, 0x2}, {0x4, 0xfffffffffffffa88, 0x80, 0x6}, 0x4, 0x6e6bbb, 0x0, 0xddbcb83f0bb18ac4, 0x2, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d2, 0x32}, 0x2, @in=@broadcast, 0x3501, 0x3, 0x0, 0x1, 0x9, 0x54, 0x100}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x94) socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) unshare(0x42000000) 11.357313621s ago: executing program 2 (id=9911): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x8042, 0x0) pwrite64(r6, &(0x7f0000000000)="c0", 0x1, 0x8080c61) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) r7 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r7, 0x0, 0x8, 0x0, 0x0) sendmmsg$inet(r7, &(0x7f00000053c0)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1}}], 0x1, 0x4800) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) mkdir(0x0, 0x0) open(0x0, 0x169242, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) 11.356636731s ago: executing program 4 (id=9912): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$uac1(0x0, 0xaf, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x3, 0x1, 0x0, 0x70, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x8, 0x3, 0x0]}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x101, 0x6, 0x0, 0x1000, 0x4, 0xff}, @input_terminal={0xc, 0x24, 0x2, 0x8, 0x201, 0x3, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2, 0x0, 0x85}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x3, 0x7, 0x3, '\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @as_header={0x7, 0x24, 0x1, 0x28, 0xc, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9, 0x0, 0x0, {0x7, 0x25, 0x1, 0x80, 0xfe, 0x7}}}}}}}]}}, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB="81000000000000000000", @ANYRES32=0x0], 0x50) prlimit64(0x0, 0xc, &(0x7f0000000000)={0x3, 0xb}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f00000004c0), &(0x7f0000000540)}, 0x20) 11.290510202s ago: executing program 9 (id=9913): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) prlimit64(r2, 0x7, &(0x7f0000000000)={0x9, 0xfffffffffffffffd}, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r5}, &(0x7f0000001c00), &(0x7f0000001c40)=r6}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pivot_root(&(0x7f0000000580)='./cgroup.cpu/cpuset.cpus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3008c94, &(0x7f0000000680)={[{@dioread_lock}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@nomblk_io_submit}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}], [{@fsname}]}, 0x48, 0x7bf, &(0x7f0000000e00)="$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") write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) getgroups(0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 5.973344694s ago: executing program 2 (id=9914): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) prlimit64(r2, 0x7, &(0x7f0000000000)={0x9, 0xfffffffffffffffd}, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r5}, &(0x7f0000001c00), &(0x7f0000001c40)=r6}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pivot_root(&(0x7f0000000580)='./cgroup.cpu/cpuset.cpus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3008c94, &(0x7f0000000680)={[{@dioread_lock}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@nomblk_io_submit}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}], [{@fsname}]}, 0x48, 0x7bf, &(0x7f0000000e00)="$eJzs3c9rG1ceAPDvyPLPZNdeWNjNngQLu4EQeZ31Jlso1KWHUmgg0J56aGJkxaSWrWDJITamTSiFXgpt6a295Nyfl9Jrfxx6af+PkhJaJzSlh+Iy+hHLtuRKiS2T5vOBid+beaM333lPb148YymAR1Yu/ScTcSwi3kwixhvrk4gYrKWyETP1cnc31gvpksTm5nM/JLUydzbWC9GyT+pII/P3iPjytYgTmd31VlbXFmZLpeJyIz9ZXbw8WVldO3lpcXa+OF9cOj01PX3qzP/OnN6/WH/6du3o9289/e+PZn559W8fv/FVEjNxtLGtNY79kotc45wMpqdwm6f2u7JD8+nLXRRq6QHZgzwYepQ2zECjVY7FeAzs1T6j/TwyAOCgvBIRm50MdNwCADzUkvr1/4nDPg4AoF+avwe4s7FeaC6H+xuJ/rr1ZESM1ONv3t+sb8k27tmN1O6Djt1Jtt0ZSSJiYh/qz0XEe5+9+EG6xAHdhwRo59r1iLgwkds9/ie7nlno1X/ar55vzeR2bDT+Qf98ns5//t9u/pe5N/+JNvOf4Tbv3fuRS7bnd7//Mzf3oZqO0vnf4y3Ptt1tib9hYqCR+1NtzjeYXLxUKqZj258j4ngMDqf5qT3qOH7719udtrXO/358+6X30/rTn1slMjezw9v3mZutzj5IzK1uXY/4R7Zd/On4P1xr/6TD/Pdcl3U889jr73balsafxttcdsd/sDZvRPyrbftvdcxkz+cTJ2vdYbLZKdr4ZCbGOtWfy261f7qk9Tf/L9APafuP7R3/RNL6vGal65e+97TYNzfGv+hUqLX/t4+/ff8fSp6vpYca667OVqvLUxFDybO715/a2reZb5ZP4z/+z/bv/+b416b/v5C+/oUuT0R2ID6sj5j3E//BSuOf66n9e07EyN2FgU717xF/o/+k7T+9bZ9uxr9uD/BBzh0AAAAAAAAAAAAAAAAAAAAAAAAAdCsTEUcjyeTvpTOZfL7+Hd5/jbFMqVypnrhYXlmai9p3ZU/EYKb5UZfjLZ+HOtX4PPxm/tSO/H8j4i8R8c7waC2fL5RLc4cdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0HOnw/f+p74Z3FB44jCMEAA7EiAs7ADxqkmz2sA8BAOi3kZ5Kjx7YcQAA/dPb9R8A+CNw/QeAR8/vXP93/hkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Orc2bPpsvnzxnohzc9dWV1ZKF85OVesLOQXVwr5Qnn5cn6+XJ4vFfOF8mLHF7pW/1Eqly9Px9LK1clqsVKdrKyunV8sryxVz19anJ0vni8O9i0yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOheZXVtYbZUKi5L7E9iuHFiu9xr4et68XZlNjcPPxyJvRNxrafmfogSMbQ1Soz2f2ACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeEj8FgAA///+gx9z") write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) getgroups(0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x1000}}) 5.837806447s ago: executing program 0 (id=9915): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2482ac861b82b520}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) (async) unshare(0x26000400) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}}, 0x0) 5.821378967s ago: executing program 7 (id=9916): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_clone(0x0, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r3}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 5.818638757s ago: executing program 4 (id=9917): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_clone(0x0, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000000), &(0x7f00000003c0)="5cbacbd181f2ed01cca6f4f4862323baf158a6ee6d9a9a8ed58cb6b0fde3") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) close(r5) io_setup(0x8, &(0x7f0000001e00)) 5.559617162s ago: executing program 0 (id=9918): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="0035000000000006000000000000800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file1\x00', 0x61000, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 5.558867992s ago: executing program 9 (id=9919): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (fail_nth: 1) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB], 0x58}}, 0x0) getpeername(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.546044583s ago: executing program 0 (id=9920): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="324a0500370200001c001280850001006970697000"/36], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, &(0x7f00000004c0)=""/201, 0xd9, 0xc9, 0x1}, 0x28) socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000007000000040000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) socketpair(0x2a, 0xa, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)=@udp=r3}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) write$binfmt_elf32(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c460b067a25d4000000000000000300060006000000ba03000038000000fd2600000180ffff0600200003"], 0x98) close(r6) r7 = inotify_init1(0x800) inotify_add_watch(r7, &(0x7f00000001c0)='./file0\x00', 0x200) truncate(&(0x7f0000000300)='./file0\x00', 0x92) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="1a00"/28], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYRES64=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r11}, 0x10) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000280)='./file2\x00', 0x84044, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES64=r2, @ANYRES32], 0x6, 0x2d7, &(0x7f0000000a40)="$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") open(&(0x7f00009e1000)='./file0\x00', 0x3358c3, 0x0) 4.585774011s ago: executing program 9 (id=9921): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x18, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[], [], 0x2c}) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000c00)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_batadv\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x0, 0x1, 0xfffffffc, 0x3}}) write$P9_RVERSION(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r5 = dup(r3) write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r10}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) utime(&(0x7f0000000200)='./file0\x00', 0x0) 4.094360021s ago: executing program 4 (id=9922): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000e9a07c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = fcntl$dupfd(r4, 0x406, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4040011}, 0x400c0) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xf, &(0x7f0000000040)) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 3.976768803s ago: executing program 0 (id=9923): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000100001040000000000000000000002", @ANYRES32=0x0, @ANYBLOB="0000000002000100240012800b00010065727370616e00001400028006000200300000"], 0x44}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40041}, 0x4000054) 3.963757493s ago: executing program 2 (id=9924): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000001640)=ANY=[], 0x2, 0x216, &(0x7f0000001900)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1800052, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x18) capset(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x3}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_setup(0x5, 0x0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) getdents64(r0, 0x0, 0x0) 3.879641535s ago: executing program 9 (id=9925): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x8042, 0x0) pwrite64(r6, &(0x7f0000000000)="c0", 0x1, 0x8080c61) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) r7 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r7, 0x0, 0x8, 0x0, 0x0) sendmmsg$inet(r7, &(0x7f00000053c0)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1}}], 0x1, 0x4800) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) mkdir(0x0, 0x0) open(0x0, 0x169242, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) 15.877859ms ago: executing program 0 (id=9926): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) syz_usb_connect$uac1(0x0, 0xad, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x3, 0x1, 0x0, 0x70, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9}, [@feature_unit={0xb, 0x24, 0x6, 0x0, 0x0, 0x2, [0x8, 0x0]}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x101, 0x6, 0x0, 0x1000, 0x4, 0xff}, @input_terminal={0xc, 0x24, 0x2, 0x8, 0x201, 0x3, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2, 0x0, 0x85}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x3, 0x7, 0x3, '\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @as_header={0x7, 0x24, 0x1, 0x28, 0xc, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9, 0x0, 0x0, {0x7, 0x25, 0x1, 0x80, 0xfe, 0x7}}}}}}}]}}, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="81000000000000000000000000000000feffffff", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) prlimit64(r2, 0xc, &(0x7f0000000000)={0x3, 0xb}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 4.194579ms ago: executing program 2 (id=9927): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) syz_usb_connect$uac1(0x0, 0xab, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x0, 0x70, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x8, 0x3, 0x0]}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x101, 0x6, 0x0, 0x1000, 0x4, 0xff}, @input_terminal={0xc, 0x24, 0x2, 0x8, 0x201, 0x3, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2, 0x0, 0x85}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x3, 0x7, 0x3, '\x00\x00\x00\x00\x00'}, @as_header={0x7, 0x24, 0x1, 0x28, 0xc, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9, 0x0, 0x0, {0x7, 0x25, 0x1, 0x80, 0xfe, 0x7}}}}}}}]}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) prlimit64(r2, 0xc, &(0x7f0000000000)={0x3, 0xb}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 0s ago: executing program 4 (id=9928): r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat2(0xffffffffffffffff, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)={0xc00, 0x112, 0x1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) (fail_nth: 1) kernel console output (not intermixed with test programs): ext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2453.221191][T31553] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 2453.250470][ T1284] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 2453.263890][T31553] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2453.273110][T31553] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2453.281289][T31553] usb 10-1: Product: syz [ 2453.285575][ T1284] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2453.294630][T31553] usb 10-1: Manufacturer: syz [ 2453.299344][T31553] usb 10-1: SerialNumber: syz [ 2453.304262][ T1284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2453.312507][ T1284] usb 5-1: Product: syz [ 2453.316704][ T1284] usb 5-1: Manufacturer: syz [ 2453.321936][ T1284] usb 5-1: SerialNumber: syz [ 2453.522855][ T1471] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9594'. [ 2453.534685][T31553] usb 10-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 2453.543393][ T1467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9593'. [ 2453.552377][T31553] usb 10-1: found format II with max.bitrate = 3, frame size=7 [ 2453.561572][ T1467] device vlan2 entered promiscuous mode [ 2453.567128][ T1467] device gretap0 entered promiscuous mode [ 2453.572926][T31553] usb 10-1: 2:1: All rates were zero [ 2453.584189][T31553] usb 10-1: USB disconnect, device number 40 [ 2453.644597][ T1284] usb 5-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 2453.653085][ T1284] usb 5-1: found format II with max.bitrate = 3, frame size=7 [ 2453.660609][ T1284] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 2453.663818][ T1486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1486 comm=syz.2.9598 [ 2453.672797][ T1284] usb 5-1: USB disconnect, device number 58 [ 2454.101605][ T1488] loop9: detected capacity change from 0 to 4096 [ 2454.108281][ T1488] EXT4-fs: Ignoring removed mblk_io_submit option [ 2454.115375][ T1488] EXT4-fs (loop9): Test dummy encryption mode enabled [ 2454.124873][ T1488] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 2454.136905][ T28] audit: type=1400 audit(2454.118:3997): avc: denied { setattr } for pid=1487 comm="syz.9.9599" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2454.169133][ T824] EXT4-fs (loop9): unmounting filesystem. [ 2454.294091][ T1497] netlink: 'syz.9.9600': attribute type 12 has an invalid length. [ 2455.803748][ T1507] loop9: detected capacity change from 0 to 128 [ 2456.005090][ T1507] syz.9.9603: attempt to access beyond end of device [ 2456.005090][ T1507] loop9: rw=2049, sector=225, nr_sectors = 128 limit=128 [ 2456.024711][ T1507] syz.9.9603: attempt to access beyond end of device [ 2456.024711][ T1507] loop9: rw=2049, sector=225, nr_sectors = 128 limit=128 [ 2456.635523][T21191] kworker/u4:1: attempt to access beyond end of device [ 2456.635523][T21191] loop9: rw=1, sector=353, nr_sectors = 688 limit=128 [ 2456.697176][ T1520] loop9: detected capacity change from 0 to 2048 [ 2456.755079][ T1520] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 2456.774179][ T28] audit: type=1400 audit(2456.758:3998): avc: denied { append } for pid=1519 comm="syz.9.9607" path="/44/file1/memory.numa_stat" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 2456.798378][ T1525] binder: 1524:1525 ioctl c0306201 200000000080 returned -14 [ 2456.805937][ T1520] EXT4-fs (loop9): shut down requested (0) [ 2456.823138][ T1520] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 2456.824061][ T28] audit: type=1400 audit(2456.788:3999): avc: denied { ioctl } for pid=1519 comm="syz.9.9607" path="/44/file1/memory.numa_stat" dev="loop9" ino=18 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 2456.841630][ T1520] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 2456.885884][ T1520] overlayfs: failed to resolve './bus': -2 [ 2456.896438][ T1526] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 2456.924166][ T1520] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 2456.936484][ T1520] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 2456.961337][ T1520] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 2456.993115][ T824] EXT4-fs (loop9): unmounting filesystem. [ 2457.097938][ T1533] loop9: detected capacity change from 0 to 512 [ 2457.109350][ T1533] EXT4-fs: Invalid want_extra_isize 4 [ 2457.334459][ T1538] syz.0.9612[1538] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2457.334544][ T1538] syz.0.9612[1538] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2459.322716][ T1567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9622'. [ 2459.386439][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 2459.386469][ T28] audit: type=1400 audit(2459.368:4005): avc: denied { setattr } for pid=1571 comm="syz.7.9623" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2459.447814][ T1576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9624'. [ 2459.495918][ T1576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9624'. [ 2459.798778][ T1584] FAULT_INJECTION: forcing a failure. [ 2459.798778][ T1584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2459.838706][ T1584] CPU: 0 PID: 1584 Comm: syz.7.9627 Not tainted syzkaller #0 [ 2459.846123][ T1584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2459.856180][ T1584] Call Trace: [ 2459.859471][ T1584] [ 2459.862410][ T1584] __dump_stack+0x21/0x24 [ 2459.866752][ T1584] dump_stack_lvl+0xee/0x150 [ 2459.871359][ T1584] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2459.876405][ T1584] ? vfs_write+0x9d6/0xca0 [ 2459.880854][ T1584] dump_stack+0x15/0x24 [ 2459.885019][ T1584] should_fail_ex+0x3d4/0x520 [ 2459.889715][ T1584] should_fail+0xb/0x10 [ 2459.893891][ T1584] should_fail_usercopy+0x1a/0x20 [ 2459.898933][ T1584] _copy_from_user+0x1e/0xc0 [ 2459.903539][ T1584] get_timespec64+0x8b/0x1a0 [ 2459.908147][ T1584] ? __cfi_get_timespec64+0x10/0x10 [ 2459.913362][ T1584] ? __kasan_check_write+0x14/0x20 [ 2459.918491][ T1584] ? fput+0x154/0x1a0 [ 2459.922486][ T1584] __x64_sys_recvmmsg+0x140/0x240 [ 2459.927519][ T1584] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 2459.933077][ T1584] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 2459.939164][ T1584] x64_sys_call+0x3e7/0x9a0 [ 2459.943694][ T1584] do_syscall_64+0x4c/0xa0 [ 2459.948126][ T1584] ? clear_bhb_loop+0x30/0x80 [ 2459.952819][ T1584] ? clear_bhb_loop+0x30/0x80 [ 2459.957512][ T1584] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2459.963454][ T1584] RIP: 0033:0x7fb0ab18ebe9 [ 2459.967886][ T1584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2459.987512][ T1584] RSP: 002b:00007fb0ac07f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2459.995936][ T1584] RAX: ffffffffffffffda RBX: 00007fb0ab3c5fa0 RCX: 00007fb0ab18ebe9 [ 2460.003917][ T1584] RDX: 0000000000000001 RSI: 0000200000004600 RDI: 0000000000000005 [ 2460.011899][ T1584] RBP: 00007fb0ac07f090 R08: 0000200000004740 R09: 0000000000000000 [ 2460.019878][ T1584] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 2460.027861][ T1584] R13: 00007fb0ab3c6038 R14: 00007fb0ab3c5fa0 R15: 00007ffe79937cb8 [ 2460.035847][ T1584] [ 2460.543494][ T1596] loop9: detected capacity change from 0 to 2048 [ 2460.551835][ T1596] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2460.558771][ T1596] ext4: Unknown parameter 'fsname' [ 2461.045710][ T28] audit: type=1326 audit(2461.028:4006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1599 comm="syz.2.9630" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45d5f8ebe9 code=0x0 [ 2461.627396][ T1604] FAULT_INJECTION: forcing a failure. [ 2461.627396][ T1604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2461.640702][ T1604] CPU: 0 PID: 1604 Comm: syz.7.9631 Not tainted syzkaller #0 [ 2461.648092][ T1604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2461.658160][ T1604] Call Trace: [ 2461.661439][ T1604] [ 2461.664373][ T1604] __dump_stack+0x21/0x24 [ 2461.668733][ T1604] dump_stack_lvl+0xee/0x150 [ 2461.673345][ T1604] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2461.678394][ T1604] ? vfs_write+0x9d6/0xca0 [ 2461.682833][ T1604] dump_stack+0x15/0x24 [ 2461.687000][ T1604] should_fail_ex+0x3d4/0x520 [ 2461.691694][ T1604] should_fail+0xb/0x10 [ 2461.695876][ T1604] should_fail_usercopy+0x1a/0x20 [ 2461.700924][ T1604] _copy_from_user+0x1e/0xc0 [ 2461.705536][ T1604] get_timespec64+0x8b/0x1a0 [ 2461.710161][ T1604] ? __cfi_get_timespec64+0x10/0x10 [ 2461.715391][ T1604] ? __kasan_check_write+0x14/0x20 [ 2461.720527][ T1604] ? fput+0x154/0x1a0 [ 2461.724505][ T1604] __x64_sys_recvmmsg+0x140/0x240 [ 2461.729530][ T1604] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 2461.735065][ T1604] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 2461.741130][ T1604] x64_sys_call+0x3e7/0x9a0 [ 2461.745628][ T1604] do_syscall_64+0x4c/0xa0 [ 2461.750034][ T1604] ? clear_bhb_loop+0x30/0x80 [ 2461.754711][ T1604] ? clear_bhb_loop+0x30/0x80 [ 2461.759388][ T1604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2461.765279][ T1604] RIP: 0033:0x7fb0ab18ebe9 [ 2461.769698][ T1604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2461.789307][ T1604] RSP: 002b:00007fb0ac07f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2461.797804][ T1604] RAX: ffffffffffffffda RBX: 00007fb0ab3c5fa0 RCX: 00007fb0ab18ebe9 [ 2461.805774][ T1604] RDX: 0000000000000001 RSI: 0000200000004600 RDI: 0000000000000005 [ 2461.813779][ T1604] RBP: 00007fb0ac07f090 R08: 0000200000004740 R09: 0000000000000000 [ 2461.821761][ T1604] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 2461.829757][ T1604] R13: 00007fb0ab3c6038 R14: 00007fb0ab3c5fa0 R15: 00007ffe79937cb8 [ 2461.837733][ T1604] [ 2462.028209][ T1619] syz.0.9633[1619] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2462.028284][ T1619] syz.0.9633[1619] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2462.134322][ T391] usb 10-1: new low-speed USB device number 41 using dummy_hcd [ 2462.403124][ T1621] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9636'. [ 2463.009938][ T28] audit: type=1400 audit(2462.998:4007): avc: denied { mount } for pid=1617 comm="syz.2.9637" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 2463.098090][ T391] usb 10-1: Invalid ep0 maxpacket: 64 [ 2463.209492][ T28] audit: type=1400 audit(2463.038:4008): avc: denied { remount } for pid=1617 comm="syz.2.9637" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2463.237615][ T1629] netlink: 68 bytes leftover after parsing attributes in process `syz.7.9642'. [ 2463.268120][ T391] usb 10-1: new low-speed USB device number 42 using dummy_hcd [ 2464.348473][ T1629] netlink: 48 bytes leftover after parsing attributes in process `syz.7.9642'. [ 2464.363217][ T1629] netlink: 68 bytes leftover after parsing attributes in process `syz.7.9642'. [ 2464.373114][ T1629] netlink: 48 bytes leftover after parsing attributes in process `syz.7.9642'. [ 2464.384941][ T1629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=1629 comm=syz.7.9642 [ 2464.815243][ T28] audit: type=1400 audit(2464.798:4009): avc: denied { listen } for pid=1638 comm="syz.7.9645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2464.882337][ T1643] FAULT_INJECTION: forcing a failure. [ 2464.882337][ T1643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2464.915841][ T1643] CPU: 0 PID: 1643 Comm: syz.7.9648 Not tainted syzkaller #0 [ 2464.923315][ T1643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2464.933393][ T1643] Call Trace: [ 2464.936689][ T1643] [ 2464.939630][ T1643] __dump_stack+0x21/0x24 [ 2464.944005][ T1643] dump_stack_lvl+0xee/0x150 [ 2464.948617][ T1643] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2464.953654][ T1643] ? vfs_write+0x9d6/0xca0 [ 2464.958087][ T1643] dump_stack+0x15/0x24 [ 2464.962257][ T1643] should_fail_ex+0x3d4/0x520 [ 2464.966978][ T1643] should_fail+0xb/0x10 [ 2464.971144][ T1643] should_fail_usercopy+0x1a/0x20 [ 2464.976177][ T1643] _copy_from_user+0x1e/0xc0 [ 2464.980771][ T1643] __sys_connect+0x132/0x420 [ 2464.985368][ T1643] ? __cfi___sys_connect+0x10/0x10 [ 2464.990481][ T1643] ? __kasan_check_write+0x14/0x20 [ 2464.995602][ T1643] ? debug_smp_processor_id+0x17/0x20 [ 2465.000979][ T1643] __x64_sys_connect+0x7a/0x90 [ 2465.005760][ T1643] x64_sys_call+0x88d/0x9a0 [ 2465.010283][ T1643] do_syscall_64+0x4c/0xa0 [ 2465.014717][ T1643] ? clear_bhb_loop+0x30/0x80 [ 2465.019396][ T1643] ? clear_bhb_loop+0x30/0x80 [ 2465.024156][ T1643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2465.030048][ T1643] RIP: 0033:0x7fb0ab18ebe9 [ 2465.034461][ T1643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2465.054154][ T1643] RSP: 002b:00007fb0ac07f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2465.062667][ T1643] RAX: ffffffffffffffda RBX: 00007fb0ab3c5fa0 RCX: 00007fb0ab18ebe9 [ 2465.070648][ T1643] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000004 [ 2465.078708][ T1643] RBP: 00007fb0ac07f090 R08: 0000000000000000 R09: 0000000000000000 [ 2465.086776][ T1643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2465.094747][ T1643] R13: 00007fb0ab3c6038 R14: 00007fb0ab3c5fa0 R15: 00007ffe79937cb8 [ 2465.102776][ T1643] [ 2465.235055][ T1655] loop9: detected capacity change from 0 to 128 [ 2465.241722][ T1655] ext4: Unknown parameter 'mask' [ 2465.402803][ T391] usb 10-1: device not accepting address 42, error -71 [ 2465.473235][ T391] usb usb10-port1: attempt power cycle [ 2466.278081][ T1671] block device autoloading is deprecated and will be removed. [ 2466.298036][ T2339] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 2466.336450][ T1674] syz.7.9653[1674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2466.336527][ T1674] syz.7.9653[1674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2466.365935][ T1675] netlink: 184 bytes leftover after parsing attributes in process `syz.9.9655'. [ 2466.443636][ T1678] FAULT_INJECTION: forcing a failure. [ 2466.443636][ T1678] name failslab, interval 1, probability 0, space 0, times 0 [ 2466.456453][ T1678] CPU: 0 PID: 1678 Comm: syz.4.9656 Not tainted syzkaller #0 [ 2466.463844][ T1678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2466.473908][ T1678] Call Trace: [ 2466.477198][ T1678] [ 2466.480140][ T1678] __dump_stack+0x21/0x24 [ 2466.484481][ T1678] dump_stack_lvl+0xee/0x150 [ 2466.489094][ T1678] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2466.494139][ T1678] dump_stack+0x15/0x24 [ 2466.498298][ T1678] should_fail_ex+0x3d4/0x520 [ 2466.502989][ T1678] __should_failslab+0xac/0xf0 [ 2466.507766][ T1678] ? __get_vm_area_node+0x12c/0x360 [ 2466.512982][ T1678] should_failslab+0x9/0x20 [ 2466.517492][ T1678] __kmem_cache_alloc_node+0x3d/0x2c0 [ 2466.522876][ T1678] ? __get_vm_area_node+0x12c/0x360 [ 2466.528101][ T1678] kmalloc_node_trace+0x26/0xb0 [ 2466.532970][ T1678] __get_vm_area_node+0x12c/0x360 [ 2466.538031][ T1678] __vmalloc_node_range+0x326/0x13d0 [ 2466.543327][ T1678] ? netlink_sendmsg+0x5b5/0xbc0 [ 2466.548284][ T1678] ? __local_bh_enable_ip+0x58/0x80 [ 2466.553495][ T1678] ? _raw_spin_unlock_bh+0x50/0x60 [ 2466.558621][ T1678] ? __cfi___vmalloc_node_range+0x10/0x10 [ 2466.564349][ T1678] ? netlink_data_ready+0x10/0x10 [ 2466.569397][ T1678] ? netlink_sendmsg+0x5b5/0xbc0 [ 2466.574351][ T1678] vmalloc+0x78/0x90 [ 2466.578269][ T1678] ? netlink_sendmsg+0x5b5/0xbc0 [ 2466.583225][ T1678] netlink_sendmsg+0x5b5/0xbc0 [ 2466.588002][ T1678] ? __cfi_netlink_sendmsg+0x10/0x10 [ 2466.593308][ T1678] ? avc_has_perm_noaudit+0x2f4/0x460 [ 2466.598790][ T1678] ? security_socket_sendmsg+0x93/0xb0 [ 2466.604257][ T1678] ? __cfi_netlink_sendmsg+0x10/0x10 [ 2466.609561][ T1678] kernel_sendmsg+0x222/0x320 [ 2466.614252][ T1678] ? __cfi_kernel_sendmsg+0x10/0x10 [ 2466.619466][ T1678] sock_no_sendpage+0xf4/0x150 [ 2466.624256][ T1678] ? __cfi_sock_no_sendpage+0x10/0x10 [ 2466.629640][ T1678] ? __kernel_text_address+0xd/0x30 [ 2466.634951][ T1678] kernel_sendpage+0x256/0x2d0 [ 2466.639728][ T1678] sock_sendpage+0x86/0xb0 [ 2466.644167][ T1678] pipe_to_sendpage+0x22d/0x320 [ 2466.649028][ T1678] ? __cfi_sock_sendpage+0x10/0x10 [ 2466.654159][ T1678] ? __cfi_pipe_to_sendpage+0x10/0x10 [ 2466.659556][ T1678] __splice_from_pipe+0x33b/0x910 [ 2466.664706][ T1678] ? __cfi_pipe_to_sendpage+0x10/0x10 [ 2466.670099][ T1678] generic_splice_sendpage+0xf3/0x150 [ 2466.675575][ T1678] ? __cfi_generic_splice_sendpage+0x10/0x10 [ 2466.681562][ T1678] ? security_file_permission+0x94/0xb0 [ 2466.687127][ T1678] ? rw_verify_area+0xa7/0x1c0 [ 2466.691906][ T1678] ? __cfi_generic_splice_sendpage+0x10/0x10 [ 2466.697899][ T1678] do_splice+0xdb3/0x14d0 [ 2466.702238][ T1678] ? security_file_permission+0x94/0xb0 [ 2466.707798][ T1678] ? __fget_files+0x2d5/0x330 [ 2466.712485][ T1678] ? __cfi_do_splice+0x10/0x10 [ 2466.717268][ T1678] ? __fdget+0x19c/0x220 [ 2466.721518][ T1678] __se_sys_splice+0x32b/0x420 [ 2466.726299][ T1678] ? __x64_sys_splice+0x100/0x100 [ 2466.731435][ T1678] ? __cfi_ksys_write+0x10/0x10 [ 2466.736299][ T1678] ? do_user_addr_fault+0x9ac/0x1050 [ 2466.741600][ T1678] __x64_sys_splice+0xe5/0x100 [ 2466.746468][ T1678] x64_sys_call+0x22e/0x9a0 [ 2466.750983][ T1678] do_syscall_64+0x4c/0xa0 [ 2466.755407][ T1678] ? clear_bhb_loop+0x30/0x80 [ 2466.760098][ T1678] ? clear_bhb_loop+0x30/0x80 [ 2466.764805][ T1678] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2466.770711][ T1678] RIP: 0033:0x7f357d98ebe9 [ 2466.775147][ T1678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2466.794757][ T1678] RSP: 002b:00007f357e75f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2466.803200][ T1678] RAX: ffffffffffffffda RBX: 00007f357dbc6090 RCX: 00007f357d98ebe9 [ 2466.811348][ T1678] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2466.819323][ T1678] RBP: 00007f357e75f090 R08: 000000000084ffe0 R09: 0000000000000000 [ 2466.827295][ T1678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2466.835253][ T1678] R13: 00007f357dbc6128 R14: 00007f357dbc6090 R15: 00007ffc8fb7e648 [ 2466.843221][ T1678] [ 2466.847173][ T1678] syz.4.9656: vmalloc error: size 4480, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 2466.861482][ T1678] CPU: 1 PID: 1678 Comm: syz.4.9656 Not tainted syzkaller #0 [ 2466.868894][ T1678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2466.878031][ T2339] usb 3-1: Using ep0 maxpacket: 16 [ 2466.878948][ T1678] Call Trace: [ 2466.878969][ T1678] [ 2466.878978][ T1678] __dump_stack+0x21/0x24 [ 2466.885345][ T2339] usb 3-1: config 1 has an invalid descriptor of length 166, skipping remainder of the config [ 2466.887366][ T1678] dump_stack_lvl+0xee/0x150 [ 2466.890390][ T2339] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2466.894632][ T1678] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2466.894664][ T1678] ? pr_cont_kernfs_name+0x133/0x160 [ 2466.906533][ T2339] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2466.909466][ T1678] dump_stack+0x15/0x24 [ 2466.909489][ T1678] warn_alloc+0x1b0/0x1d0 [ 2466.918486][ T2339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2466.923382][ T1678] ? should_failslab+0x9/0x20 [ 2466.923423][ T1678] ? __cfi_warn_alloc+0x10/0x10 [ 2466.928793][ T2339] usb 3-1: Product: syz [ 2466.937700][ T1678] ? kmalloc_node_trace+0x3d/0xb0 [ 2466.941977][ T2339] usb 3-1: Manufacturer: syz [ 2466.946200][ T1678] ? __get_vm_area_node+0x353/0x360 [ 2466.954286][ T2339] usb 3-1: SerialNumber: syz [ 2466.958846][ T1678] __vmalloc_node_range+0x34b/0x13d0 [ 2466.958872][ T1678] ? __local_bh_enable_ip+0x58/0x80 [ 2466.997659][ T1678] ? _raw_spin_unlock_bh+0x50/0x60 [ 2467.002787][ T1678] ? __cfi___vmalloc_node_range+0x10/0x10 [ 2467.008508][ T1678] ? netlink_data_ready+0x10/0x10 [ 2467.013540][ T1678] ? netlink_sendmsg+0x5b5/0xbc0 [ 2467.018480][ T1678] vmalloc+0x78/0x90 [ 2467.022367][ T1678] ? netlink_sendmsg+0x5b5/0xbc0 [ 2467.027326][ T1678] netlink_sendmsg+0x5b5/0xbc0 [ 2467.032109][ T1678] ? __cfi_netlink_sendmsg+0x10/0x10 [ 2467.037397][ T1678] ? avc_has_perm_noaudit+0x2f4/0x460 [ 2467.042788][ T1678] ? security_socket_sendmsg+0x93/0xb0 [ 2467.048255][ T1678] ? __cfi_netlink_sendmsg+0x10/0x10 [ 2467.053556][ T1678] kernel_sendmsg+0x222/0x320 [ 2467.058248][ T1678] ? __cfi_kernel_sendmsg+0x10/0x10 [ 2467.063461][ T1678] sock_no_sendpage+0xf4/0x150 [ 2467.068234][ T1678] ? __cfi_sock_no_sendpage+0x10/0x10 [ 2467.073637][ T1678] ? __kernel_text_address+0xd/0x30 [ 2467.078850][ T1678] kernel_sendpage+0x256/0x2d0 [ 2467.083624][ T1678] sock_sendpage+0x86/0xb0 [ 2467.088051][ T1678] pipe_to_sendpage+0x22d/0x320 [ 2467.092915][ T1678] ? __cfi_sock_sendpage+0x10/0x10 [ 2467.098053][ T1678] ? __cfi_pipe_to_sendpage+0x10/0x10 [ 2467.103449][ T1678] __splice_from_pipe+0x33b/0x910 [ 2467.108475][ T1678] ? __cfi_pipe_to_sendpage+0x10/0x10 [ 2467.113856][ T1678] generic_splice_sendpage+0xf3/0x150 [ 2467.119235][ T1678] ? __cfi_generic_splice_sendpage+0x10/0x10 [ 2467.125231][ T1678] ? security_file_permission+0x94/0xb0 [ 2467.130790][ T1678] ? rw_verify_area+0xa7/0x1c0 [ 2467.135561][ T1678] ? __cfi_generic_splice_sendpage+0x10/0x10 [ 2467.141551][ T1678] do_splice+0xdb3/0x14d0 [ 2467.145892][ T1678] ? security_file_permission+0x94/0xb0 [ 2467.151449][ T1678] ? __fget_files+0x2d5/0x330 [ 2467.156129][ T1678] ? __cfi_do_splice+0x10/0x10 [ 2467.160906][ T1678] ? __fdget+0x19c/0x220 [ 2467.165153][ T1678] __se_sys_splice+0x32b/0x420 [ 2467.169931][ T1678] ? __x64_sys_splice+0x100/0x100 [ 2467.174963][ T1678] ? __cfi_ksys_write+0x10/0x10 [ 2467.179923][ T1678] ? do_user_addr_fault+0x9ac/0x1050 [ 2467.185216][ T1678] __x64_sys_splice+0xe5/0x100 [ 2467.190000][ T1678] x64_sys_call+0x22e/0x9a0 [ 2467.194513][ T1678] do_syscall_64+0x4c/0xa0 [ 2467.198927][ T1678] ? clear_bhb_loop+0x30/0x80 [ 2467.203619][ T1678] ? clear_bhb_loop+0x30/0x80 [ 2467.208293][ T1678] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2467.214183][ T1678] RIP: 0033:0x7f357d98ebe9 [ 2467.218602][ T1678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2467.238299][ T1678] RSP: 002b:00007f357e75f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2467.246718][ T1678] RAX: ffffffffffffffda RBX: 00007f357dbc6090 RCX: 00007f357d98ebe9 [ 2467.254691][ T1678] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2467.262654][ T1678] RBP: 00007f357e75f090 R08: 000000000084ffe0 R09: 0000000000000000 [ 2467.270620][ T1678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2467.278593][ T1678] R13: 00007f357dbc6128 R14: 00007f357dbc6090 R15: 00007ffc8fb7e648 [ 2467.286565][ T1678] [ 2467.290952][ T1678] Mem-Info: [ 2467.298351][ T1678] active_anon:15258 inactive_anon:68 isolated_anon:0 [ 2467.298351][ T1678] active_file:27047 inactive_file:3417 isolated_file:0 [ 2467.298351][ T1678] unevictable:1024 dirty:111 writeback:0 [ 2467.298351][ T1678] slab_reclaimable:10645 slab_unreclaimable:73855 [ 2467.298351][ T1678] mapped:32738 shmem:6926 pagetables:553 [ 2467.298351][ T1678] sec_pagetables:0 bounce:0 [ 2467.298351][ T1678] kernel_misc_reclaimable:0 [ 2467.298351][ T1678] free:1494828 free_pcp:3845 free_cma:0 [ 2467.343831][ T1678] Node 0 active_anon:44532kB inactive_anon:272kB active_file:108188kB inactive_file:13668kB unevictable:4096kB isolated(anon):0kB isolated(file):0kB mapped:130852kB dirty:444kB writeback:0kB shmem:16304kB shmem_thp: 2048kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB kernel_stack:5472kB pagetables:2112kB sec_pagetables:0kB all_unreclaimable? no [ 2467.377270][ T1678] DMA32 free:2968532kB boost:0kB min:31288kB low:39108kB high:46928kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2974204kB mlocked:0kB bounce:0kB free_pcp:5672kB local_pcp:0kB free_cma:0kB [ 2467.428048][ T1678] lowmem_reserve[]: 0 3932 3932 3932 [ 2467.433428][ T1678] Normal free:3008764kB boost:0kB min:42436kB low:53044kB high:63652kB reserved_highatomic:0KB active_anon:38632kB inactive_anon:272kB active_file:108188kB inactive_file:13668kB unevictable:4096kB writepending:444kB present:5242880kB managed:4026656kB mlocked:4096kB bounce:0kB free_pcp:33800kB local_pcp:13636kB free_cma:0kB [ 2467.464611][ T1681] FAULT_INJECTION: forcing a failure. [ 2467.464611][ T1681] name failslab, interval 1, probability 0, space 0, times 0 [ 2467.478148][ T1678] lowmem_reserve[]: 0 0 0 0 [ 2467.482705][ T1678] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 2*2048kB (M) 722*4096kB (M) = 2968532kB [ 2467.498593][ T1678] Normal: 1337*4kB (UME) 1795*8kB (UME) 1454*16kB (UME) 507*32kB (ME) 463*64kB (UME) 362*128kB (UME) 123*256kB (UME) 75*512kB (UME) 38*1024kB (UM) 8*2048kB (UME) 671*4096kB (UM) = 3008764kB [ 2467.499798][ T2339] usb 3-1: 0:2 : does not exist [ 2467.517624][ T1678] 34621 total pagecache pages [ 2467.527078][ T1681] CPU: 0 PID: 1681 Comm: syz.9.9658 Not tainted syzkaller #0 [ 2467.534461][ T1681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2467.544527][ T1681] Call Trace: [ 2467.547006][ T1678] 71 pages in swap cache [ 2467.547809][ T1681] [ 2467.547818][ T1681] __dump_stack+0x21/0x24 [ 2467.547839][ T1681] dump_stack_lvl+0xee/0x150 [ 2467.547865][ T1681] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2467.547895][ T1681] dump_stack+0x15/0x24 [ 2467.547911][ T1681] should_fail_ex+0x3d4/0x520 [ 2467.547936][ T1681] __should_failslab+0xac/0xf0 [ 2467.547958][ T1681] ? futex_lock_pi+0x699/0x820 [ 2467.564185][ T1678] Free swap = 124236kB [ 2467.569056][ T1681] should_failslab+0x9/0x20 [ 2467.569080][ T1681] __kmem_cache_alloc_node+0x3d/0x2c0 [ 2467.584131][ T1678] Total swap = 124996kB [ 2467.587415][ T1681] ? futex_lock_pi+0x699/0x820 [ 2467.591579][ T1678] 2097051 pages RAM [ 2467.596053][ T1681] kmalloc_trace+0x29/0xb0 [ 2467.596086][ T1681] futex_lock_pi+0x699/0x820 [ 2467.601528][ T1678] 0 pages HighMem/MovableOnly [ 2467.605595][ T1681] ? __cfi_futex_lock_pi+0x10/0x10 [ 2467.610365][ T1678] 346836 pages reserved [ 2467.614144][ T1681] ? kstrtouint_from_user+0xf7/0x150 [ 2467.618623][ T1678] 0 pages cma reserved [ 2467.623154][ T1681] ? __kasan_check_write+0x14/0x20 [ 2467.651507][ T1681] ? security_file_permission+0x94/0xb0 [ 2467.657074][ T1681] ? vfs_write+0x9d6/0xca0 [ 2467.661509][ T1681] ? slab_free_freelist_hook+0x5b/0x190 [ 2467.667113][ T1681] do_futex+0x1d8/0x420 [ 2467.671283][ T1681] ? __cfi_do_futex+0x10/0x10 [ 2467.675985][ T1681] ? __kasan_check_write+0x14/0x20 [ 2467.681123][ T1681] ? mutex_unlock+0x89/0x220 [ 2467.685739][ T1681] __se_sys_futex+0x273/0x2e0 [ 2467.690438][ T1681] ? __kasan_check_write+0x14/0x20 [ 2467.695608][ T1681] ? __x64_sys_futex+0x100/0x100 [ 2467.700560][ T1681] ? ksys_write+0x1eb/0x240 [ 2467.705100][ T1681] ? __cfi_ksys_write+0x10/0x10 [ 2467.709993][ T1681] __x64_sys_futex+0xe5/0x100 [ 2467.714683][ T1681] x64_sys_call+0x7ec/0x9a0 [ 2467.719197][ T1681] do_syscall_64+0x4c/0xa0 [ 2467.723678][ T1681] ? clear_bhb_loop+0x30/0x80 [ 2467.728388][ T1681] ? clear_bhb_loop+0x30/0x80 [ 2467.733084][ T1681] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2467.738996][ T1681] RIP: 0033:0x7fcc4558ebe9 [ 2467.743422][ T1681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2467.763038][ T1681] RSP: 002b:00007fcc46353038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2467.771496][ T1681] RAX: ffffffffffffffda RBX: 00007fcc457c5fa0 RCX: 00007fcc4558ebe9 [ 2467.779501][ T1681] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 000020000000cffc [ 2467.787488][ T1681] RBP: 00007fcc46353090 R08: 0000000000000000 R09: 00000000fffffffc [ 2467.795476][ T1681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2467.803578][ T1681] R13: 00007fcc457c6038 R14: 00007fcc457c5fa0 R15: 00007ffd6b4c3248 [ 2467.811575][ T1681] [ 2468.861722][ T1692] bridge0: port 2(bridge_slave_1) entered disabled state [ 2468.868938][ T1692] bridge0: port 1(bridge_slave_0) entered disabled state [ 2468.930070][ T1696] device bridge_slave_1 left promiscuous mode [ 2468.945557][ T1696] bridge0: port 2(bridge_slave_1) entered disabled state [ 2468.953633][ T1696] device bridge_slave_0 left promiscuous mode [ 2468.960062][ T1696] bridge0: port 1(bridge_slave_0) entered disabled state [ 2469.000471][ T2339] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 2469.013695][ T2339] usb 3-1: USB disconnect, device number 101 [ 2469.083096][ T1710] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2469.090364][ T1710] IPv6: NLM_F_CREATE should be set when creating new route [ 2469.113794][ T1712] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2469.121140][ T1712] IPv6: NLM_F_CREATE should be set when creating new route [ 2469.207267][ T1715] FAULT_INJECTION: forcing a failure. [ 2469.207267][ T1715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2469.223463][ T1715] CPU: 1 PID: 1715 Comm: syz.9.9664 Not tainted syzkaller #0 [ 2469.230862][ T1715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2469.240927][ T1715] Call Trace: [ 2469.244216][ T1715] [ 2469.247158][ T1715] __dump_stack+0x21/0x24 [ 2469.251499][ T1715] dump_stack_lvl+0xee/0x150 [ 2469.256101][ T1715] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2469.261135][ T1715] ? avc_has_perm_noaudit+0x2f4/0x460 [ 2469.266531][ T1715] dump_stack+0x15/0x24 [ 2469.270685][ T1715] should_fail_ex+0x3d4/0x520 [ 2469.275366][ T1715] should_fail+0xb/0x10 [ 2469.279526][ T1715] should_fail_usercopy+0x1a/0x20 [ 2469.284582][ T1715] _copy_from_user+0x1e/0xc0 [ 2469.289175][ T1715] sk_getsockopt+0x1b5/0x1e30 [ 2469.293863][ T1715] ? __cfi_sk_getsockopt+0x10/0x10 [ 2469.298979][ T1715] ? __cfi_avc_has_perm+0x10/0x10 [ 2469.304010][ T1715] ? vfs_write+0x9d6/0xca0 [ 2469.308431][ T1715] ? selinux_socket_getsockopt+0x208/0x2e0 [ 2469.314239][ T1715] ? __cfi_selinux_socket_getsockopt+0x10/0x10 [ 2469.320396][ T1715] ? __kasan_check_write+0x14/0x20 [ 2469.325504][ T1715] ? mutex_unlock+0x89/0x220 [ 2469.330085][ T1715] ? __fget_files+0x2d5/0x330 [ 2469.334758][ T1715] sock_getsockopt+0x74/0xa0 [ 2469.339347][ T1715] __sys_getsockopt+0x1a7/0x4a0 [ 2469.344192][ T1715] __x64_sys_getsockopt+0xbf/0xd0 [ 2469.349210][ T1715] x64_sys_call+0x3d/0x9a0 [ 2469.353638][ T1715] do_syscall_64+0x4c/0xa0 [ 2469.358044][ T1715] ? clear_bhb_loop+0x30/0x80 [ 2469.362719][ T1715] ? clear_bhb_loop+0x30/0x80 [ 2469.367414][ T1715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2469.373303][ T1715] RIP: 0033:0x7fcc4558ebe9 [ 2469.377719][ T1715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2469.397328][ T1715] RSP: 002b:00007fcc46332038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 2469.405738][ T1715] RAX: ffffffffffffffda RBX: 00007fcc457c6090 RCX: 00007fcc4558ebe9 [ 2469.413732][ T1715] RDX: 0000000000000011 RSI: 0000000000000001 RDI: 0000000000000004 [ 2469.421702][ T1715] RBP: 00007fcc46332090 R08: 0000200000000300 R09: 0000000000000000 [ 2469.429669][ T1715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2469.437636][ T1715] R13: 00007fcc457c6128 R14: 00007fcc457c6090 R15: 00007ffd6b4c3248 [ 2469.445610][ T1715] [ 2469.916827][ T1729] FAULT_INJECTION: forcing a failure. [ 2469.916827][ T1729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2469.930060][ T1729] CPU: 0 PID: 1729 Comm: syz.9.9671 Not tainted syzkaller #0 [ 2469.937454][ T1729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2469.947529][ T1729] Call Trace: [ 2469.950837][ T1729] [ 2469.953798][ T1729] __dump_stack+0x21/0x24 [ 2469.958144][ T1729] dump_stack_lvl+0xee/0x150 [ 2469.962770][ T1729] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2469.967821][ T1729] ? _parse_integer+0x2a/0x40 [ 2469.972531][ T1729] dump_stack+0x15/0x24 [ 2469.976696][ T1729] should_fail_ex+0x3d4/0x520 [ 2469.981400][ T1729] should_fail+0xb/0x10 [ 2469.985577][ T1729] should_fail_usercopy+0x1a/0x20 [ 2469.990748][ T1729] _copy_from_user+0x1e/0xc0 [ 2469.995384][ T1729] ___sys_sendmsg+0x155/0x290 [ 2470.000079][ T1729] ? __sys_sendmsg+0x270/0x270 [ 2470.004851][ T1729] ? __kasan_check_write+0x14/0x20 [ 2470.009983][ T1729] ? proc_fail_nth_write+0x17a/0x1f0 [ 2470.015277][ T1729] ? vfs_write+0x9d6/0xca0 [ 2470.019719][ T1729] ? __fdget+0x19c/0x220 [ 2470.023973][ T1729] __x64_sys_sendmsg+0x1f0/0x2c0 [ 2470.028926][ T1729] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 2470.034415][ T1729] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 2470.040504][ T1729] x64_sys_call+0x171/0x9a0 [ 2470.045018][ T1729] do_syscall_64+0x4c/0xa0 [ 2470.049446][ T1729] ? clear_bhb_loop+0x30/0x80 [ 2470.054150][ T1729] ? clear_bhb_loop+0x30/0x80 [ 2470.058884][ T1729] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2470.064802][ T1729] RIP: 0033:0x7fcc4558ebe9 [ 2470.069229][ T1729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2470.088877][ T1729] RSP: 002b:00007fcc46353038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2470.097314][ T1729] RAX: ffffffffffffffda RBX: 00007fcc457c5fa0 RCX: 00007fcc4558ebe9 [ 2470.105395][ T1729] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 2470.113382][ T1729] RBP: 00007fcc46353090 R08: 0000000000000000 R09: 0000000000000000 [ 2470.121369][ T1729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2470.129366][ T1729] R13: 00007fcc457c6038 R14: 00007fcc457c5fa0 R15: 00007ffd6b4c3248 [ 2470.137369][ T1729] [ 2470.225411][ T1737] netlink: 'syz.0.9674': attribute type 1 has an invalid length. [ 2470.249729][ T1737] bridge0: port 2(bridge_slave_1) entered disabled state [ 2470.256940][ T1737] bridge0: port 1(bridge_slave_0) entered disabled state [ 2470.292363][ T1733] loop9: detected capacity change from 0 to 128 [ 2470.311550][ T1737] device bridge_slave_1 left promiscuous mode [ 2470.311627][ T1737] bridge0: port 2(bridge_slave_1) entered disabled state [ 2470.312159][ T1733] FAT-fs (loop9): Unrecognized mount option "" or missing value [ 2470.312473][ T1737] device bridge_slave_0 left promiscuous mode [ 2470.312538][ T1737] bridge0: port 1(bridge_slave_0) entered disabled state [ 2470.356278][ T1733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1733 comm=syz.9.9673 [ 2470.488240][ T1751] FAULT_INJECTION: forcing a failure. [ 2470.488240][ T1751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2470.501620][ T1751] CPU: 0 PID: 1751 Comm: syz.2.9679 Not tainted syzkaller #0 [ 2470.509012][ T1751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2470.519076][ T1751] Call Trace: [ 2470.522358][ T1751] [ 2470.525290][ T1751] __dump_stack+0x21/0x24 [ 2470.529648][ T1751] dump_stack_lvl+0xee/0x150 [ 2470.534259][ T1751] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2470.539302][ T1751] dump_stack+0x15/0x24 [ 2470.543459][ T1751] should_fail_ex+0x3d4/0x520 [ 2470.548150][ T1751] should_fail+0xb/0x10 [ 2470.552326][ T1751] should_fail_usercopy+0x1a/0x20 [ 2470.556529][ T1754] loop9: detected capacity change from 0 to 1024 [ 2470.557456][ T1751] _copy_from_user+0x1e/0xc0 [ 2470.564644][ T1754] EXT4-fs: Ignoring removed orlov option [ 2470.568354][ T1751] __sys_bpf+0x277/0x780 [ 2470.568380][ T1751] ? bpf_link_show_fdinfo+0x320/0x320 [ 2470.568402][ T1751] ? __cfi_ksys_write+0x10/0x10 [ 2470.588442][ T1751] ? debug_smp_processor_id+0x17/0x20 [ 2470.593811][ T1751] __x64_sys_bpf+0x7c/0x90 [ 2470.598226][ T1751] x64_sys_call+0x488/0x9a0 [ 2470.602736][ T1751] do_syscall_64+0x4c/0xa0 [ 2470.607149][ T1751] ? clear_bhb_loop+0x30/0x80 [ 2470.610006][ T1754] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 2470.611821][ T1751] ? clear_bhb_loop+0x30/0x80 [ 2470.625426][ T1751] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2470.631337][ T1751] RIP: 0033:0x7f45d5f8ebe9 [ 2470.635759][ T1751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2470.655370][ T1751] RSP: 002b:00007f45d6e75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2470.663839][ T1751] RAX: ffffffffffffffda RBX: 00007f45d61c5fa0 RCX: 00007f45d5f8ebe9 [ 2470.671824][ T1751] RDX: 0000000000000020 RSI: 0000200000000e80 RDI: 0000000000000001 [ 2470.679827][ T1751] RBP: 00007f45d6e75090 R08: 0000000000000000 R09: 0000000000000000 [ 2470.687804][ T1751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2470.695775][ T1751] R13: 00007f45d61c6038 R14: 00007f45d61c5fa0 R15: 00007ffe9fe20208 [ 2470.703754][ T1751] [ 2470.707613][ T28] audit: type=1400 audit(2470.698:4010): avc: denied { mounton } for pid=1753 comm="syz.9.9680" path="/61/file1/file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2470.739081][ T824] EXT4-fs (loop9): unmounting filesystem. [ 2470.821636][ T1767] VFS: Lookup of 'cgroup.procs' in fuse fuse would have caused loop [ 2471.233597][ T1773] syz.2.9685[1773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2471.233688][ T1773] syz.2.9685[1773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2471.485736][ T391] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 2471.688011][ T391] usb 10-1: Using ep0 maxpacket: 16 [ 2471.694453][ T391] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 2471.726752][ T391] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2471.748076][ T391] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2471.756276][ T391] usb 10-1: Product: syz [ 2471.760670][ T391] usb 10-1: Manufacturer: syz [ 2471.765418][ T391] usb 10-1: SerialNumber: syz [ 2471.973451][ T1760] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9681'. [ 2472.069065][ T1760] device vlan2 entered promiscuous mode [ 2472.155587][ T391] usb 10-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 2472.260241][ T391] usb 10-1: found format II with max.bitrate = 3, frame size=7 [ 2472.373963][ T391] usb 10-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 2472.424813][ T391] usb 10-1: USB disconnect, device number 44 [ 2472.634380][ T28] audit: type=1400 audit(2472.608:4011): avc: denied { map } for pid=1792 comm="syz.7.9691" path="socket:[124455]" dev="sockfs" ino=124455 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2472.687671][ T1800] FAULT_INJECTION: forcing a failure. [ 2472.687671][ T1800] name failslab, interval 1, probability 0, space 0, times 0 [ 2472.700382][ T1800] CPU: 1 PID: 1800 Comm: syz.4.9690 Not tainted syzkaller #0 [ 2472.707771][ T1800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2472.717827][ T1800] Call Trace: [ 2472.721104][ T1800] [ 2472.724034][ T1800] __dump_stack+0x21/0x24 [ 2472.728371][ T1800] dump_stack_lvl+0xee/0x150 [ 2472.732975][ T1800] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2472.738010][ T1800] ? ___ratelimit+0xd/0x570 [ 2472.742519][ T1800] dump_stack+0x15/0x24 [ 2472.746679][ T1800] should_fail_ex+0x3d4/0x520 [ 2472.751367][ T1800] ? getname_flags+0xb9/0x500 [ 2472.756056][ T1800] __should_failslab+0xac/0xf0 [ 2472.760833][ T1800] should_failslab+0x9/0x20 [ 2472.765344][ T1800] kmem_cache_alloc+0x3b/0x330 [ 2472.770121][ T1800] getname_flags+0xb9/0x500 [ 2472.774636][ T1800] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 2472.780306][ T1800] getname+0x19/0x20 [ 2472.784219][ T1800] do_sys_openat2+0xcb/0x7e0 [ 2472.788802][ T1800] ? __sanitizer_cov_trace_pc+0x1/0x60 [ 2472.794255][ T1800] ? do_sys_open+0xe0/0xe0 [ 2472.798690][ T1800] ? ksys_write+0x1eb/0x240 [ 2472.803196][ T1800] __x64_sys_openat+0x136/0x160 [ 2472.808052][ T1800] x64_sys_call+0x783/0x9a0 [ 2472.812550][ T1800] do_syscall_64+0x4c/0xa0 [ 2472.816956][ T1800] ? clear_bhb_loop+0x30/0x80 [ 2472.821637][ T1800] ? clear_bhb_loop+0x30/0x80 [ 2472.826304][ T1800] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2472.832190][ T1800] RIP: 0033:0x7f357d98ebe9 [ 2472.836606][ T1800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2472.856201][ T1800] RSP: 002b:00007f357e73e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2472.864602][ T1800] RAX: ffffffffffffffda RBX: 00007f357dbc6180 RCX: 00007f357d98ebe9 [ 2472.872579][ T1800] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000007 [ 2472.880550][ T1800] RBP: 00007f357e73e090 R08: 0000000000000000 R09: 0000000000000000 [ 2472.888516][ T1800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2472.896498][ T1800] R13: 00007f357dbc6218 R14: 00007f357dbc6180 R15: 00007ffc8fb7e648 [ 2472.904535][ T1800] [ 2473.445444][ T1820] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9697'. [ 2475.271246][ T1830] FAULT_INJECTION: forcing a failure. [ 2475.271246][ T1830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2475.284766][ T1830] CPU: 0 PID: 1830 Comm: syz.0.9703 Not tainted syzkaller #0 [ 2475.292152][ T1830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2475.302213][ T1830] Call Trace: [ 2475.305504][ T1830] [ 2475.308442][ T1830] __dump_stack+0x21/0x24 [ 2475.312786][ T1830] dump_stack_lvl+0xee/0x150 [ 2475.317404][ T1830] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2475.322450][ T1830] ? _parse_integer+0x2a/0x40 [ 2475.327157][ T1830] dump_stack+0x15/0x24 [ 2475.331332][ T1830] should_fail_ex+0x3d4/0x520 [ 2475.336032][ T1830] should_fail+0xb/0x10 [ 2475.340220][ T1830] should_fail_usercopy+0x1a/0x20 [ 2475.345260][ T1830] _copy_from_user+0x1e/0xc0 [ 2475.349869][ T1830] ___sys_sendmsg+0x155/0x290 [ 2475.354561][ T1830] ? __sys_sendmsg+0x270/0x270 [ 2475.359341][ T1830] ? __kasan_check_write+0x14/0x20 [ 2475.364480][ T1830] ? proc_fail_nth_write+0x17a/0x1f0 [ 2475.369780][ T1830] ? vfs_write+0x9d6/0xca0 [ 2475.374224][ T1830] ? __fdget+0x19c/0x220 [ 2475.378481][ T1830] __x64_sys_sendmsg+0x1f0/0x2c0 [ 2475.383436][ T1830] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 2475.388907][ T1830] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 2475.395012][ T1830] x64_sys_call+0x171/0x9a0 [ 2475.399532][ T1830] do_syscall_64+0x4c/0xa0 [ 2475.403957][ T1830] ? clear_bhb_loop+0x30/0x80 [ 2475.408647][ T1830] ? clear_bhb_loop+0x30/0x80 [ 2475.413361][ T1830] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2475.419241][ T1830] RIP: 0033:0x7f542338ebe9 [ 2475.423643][ T1830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2475.443240][ T1830] RSP: 002b:00007f5421dd6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2475.451646][ T1830] RAX: ffffffffffffffda RBX: 00007f54235c6090 RCX: 00007f542338ebe9 [ 2475.459611][ T1830] RDX: 0000000000000800 RSI: 0000200000000080 RDI: 0000000000000007 [ 2475.467596][ T1830] RBP: 00007f5421dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 2475.475570][ T1830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2475.483548][ T1830] R13: 00007f54235c6128 R14: 00007f54235c6090 R15: 00007ffee22db998 [ 2475.491619][ T1830] [ 2475.638076][ T2339] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 2475.688138][ T1284] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 2475.688171][ T3689] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 2475.839206][ T2339] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2475.848996][ T2339] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2475.858700][ T2339] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2475.872907][ T2339] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2475.882005][ T2339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2475.888028][ T3689] usb 10-1: Using ep0 maxpacket: 16 [ 2475.890169][ T2339] usb 5-1: Product: syz [ 2475.896535][ T3689] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 2475.899513][ T2339] usb 5-1: Manufacturer: syz [ 2475.910481][ T1284] usb 3-1: Using ep0 maxpacket: 16 [ 2475.915146][ T2339] usb 5-1: SerialNumber: syz [ 2475.921445][ T1284] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 2475.935980][ T3689] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2475.945236][ T3689] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2475.953389][ T3689] usb 10-1: Product: syz [ 2475.957741][ T3689] usb 10-1: Manufacturer: syz [ 2475.962491][ T3689] usb 10-1: SerialNumber: syz [ 2475.967607][ T1284] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2475.976930][ T1284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2475.985273][ T1284] usb 3-1: Product: syz [ 2475.989565][ T1284] usb 3-1: Manufacturer: syz [ 2475.995017][ T1284] usb 3-1: SerialNumber: syz [ 2476.055195][ T1847] FAULT_INJECTION: forcing a failure. [ 2476.055195][ T1847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2476.068326][ T1847] CPU: 1 PID: 1847 Comm: syz.0.9707 Not tainted syzkaller #0 [ 2476.075717][ T1847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2476.085780][ T1847] Call Trace: [ 2476.089061][ T1847] [ 2476.091992][ T1847] __dump_stack+0x21/0x24 [ 2476.096317][ T1847] dump_stack_lvl+0xee/0x150 [ 2476.100926][ T1847] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2476.105971][ T1847] ? _parse_integer+0x2a/0x40 [ 2476.110664][ T1847] dump_stack+0x15/0x24 [ 2476.114825][ T1847] should_fail_ex+0x3d4/0x520 [ 2476.119504][ T1847] should_fail+0xb/0x10 [ 2476.123694][ T1847] should_fail_usercopy+0x1a/0x20 [ 2476.127683][ T2339] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 59 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2476.128730][ T1847] _copy_from_user+0x1e/0xc0 [ 2476.128757][ T1847] ___sys_sendmsg+0x155/0x290 [ 2476.128779][ T1847] ? __sys_sendmsg+0x270/0x270 [ 2476.153551][ T1847] ? __kasan_check_write+0x14/0x20 [ 2476.158683][ T1847] ? proc_fail_nth_write+0x17a/0x1f0 [ 2476.163977][ T1847] ? vfs_write+0x9d6/0xca0 [ 2476.168404][ T1847] ? __fdget+0x19c/0x220 [ 2476.172641][ T1847] __x64_sys_sendmsg+0x1f0/0x2c0 [ 2476.177575][ T1847] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 2476.183034][ T1847] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 2476.189133][ T1847] x64_sys_call+0x171/0x9a0 [ 2476.193637][ T1847] do_syscall_64+0x4c/0xa0 [ 2476.198045][ T1847] ? clear_bhb_loop+0x30/0x80 [ 2476.202728][ T1847] ? clear_bhb_loop+0x30/0x80 [ 2476.207404][ T1847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2476.213304][ T1847] RIP: 0033:0x7f542338ebe9 [ 2476.217730][ T1847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2476.237675][ T1847] RSP: 002b:00007f5421df7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2476.246084][ T1847] RAX: ffffffffffffffda RBX: 00007f54235c5fa0 RCX: 00007f542338ebe9 [ 2476.254060][ T1847] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 2476.262027][ T1847] RBP: 00007f5421df7090 R08: 0000000000000000 R09: 0000000000000000 [ 2476.269996][ T1847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2476.277974][ T1847] R13: 00007f54235c6038 R14: 00007f54235c5fa0 R15: 00007ffee22db998 [ 2476.285961][ T1847] [ 2476.292566][ T1835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9701'. [ 2476.302693][ T1833] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9705'. [ 2476.313460][ T1833] device vlan2 entered promiscuous mode [ 2476.319349][ T1849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1849 comm=syz.0.9708 [ 2476.337594][ T28] audit: type=1400 audit(2476.318:4012): avc: denied { block_suspend } for pid=1829 comm="syz.4.9704" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2476.365402][ T1851] tc_dump_action: action bad kind [ 2476.371270][ T1853] tc_dump_action: action bad kind [ 2476.398759][ T3689] usb 10-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 2476.407311][ T3689] usb 10-1: found format II with max.bitrate = 3, frame size=7 [ 2476.428389][ T3689] usb 10-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 2476.493904][ T1284] usb 3-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 2476.503379][ T3689] usb 10-1: USB disconnect, device number 45 [ 2476.509471][ T1284] usb 3-1: found format II with max.bitrate = 3, frame size=7 [ 2476.516967][ T1284] usb 3-1: 2:1: All rates were zero [ 2476.669401][ T1858] overlayfs: overlapping lowerdir path [ 2476.712342][ T2339] usb 5-1: USB disconnect, device number 59 [ 2476.713654][ T1284] usb 3-1: USB disconnect, device number 102 [ 2476.734610][ T2339] usblp0: removed [ 2476.966980][ T28] audit: type=1400 audit(2476.948:4013): avc: denied { unmount } for pid=824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2477.220302][ T1884] loop9: detected capacity change from 0 to 128 [ 2477.417184][ T1884] syz.9.9718: attempt to access beyond end of device [ 2477.417184][ T1884] loop9: rw=2049, sector=225, nr_sectors = 128 limit=128 [ 2477.449732][ T1884] syz.9.9718: attempt to access beyond end of device [ 2477.449732][ T1884] loop9: rw=2049, sector=225, nr_sectors = 128 limit=128 [ 2478.298672][T14827] kworker/u4:208: attempt to access beyond end of device [ 2478.298672][T14827] loop9: rw=1, sector=353, nr_sectors = 688 limit=128 [ 2478.439223][ T28] audit: type=1400 audit(2478.428:4014): avc: denied { connect } for pid=1888 comm="syz.9.9720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2478.471864][ T28] audit: type=1400 audit(2478.448:4015): avc: denied { write } for pid=1888 comm="syz.9.9720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2478.531471][ T28] audit: type=1400 audit(2478.508:4016): avc: denied { ioctl } for pid=1891 comm="syz.9.9721" path="socket:[125345]" dev="sockfs" ino=125345 ioctlcmd=0x48e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2478.557058][ T1894] syz.4.9719[1894] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2478.557143][ T1894] syz.4.9719[1894] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2478.590398][ T1897] FAULT_INJECTION: forcing a failure. [ 2478.590398][ T1897] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2478.615169][ T1897] CPU: 1 PID: 1897 Comm: syz.7.9722 Not tainted syzkaller #0 [ 2478.622735][ T1897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2478.632804][ T1897] Call Trace: [ 2478.636093][ T1897] [ 2478.639040][ T1897] __dump_stack+0x21/0x24 [ 2478.643385][ T1897] dump_stack_lvl+0xee/0x150 [ 2478.647999][ T1897] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2478.653045][ T1897] ? kasan_save_stack+0x4c/0x60 [ 2478.658012][ T1897] ? kasan_save_stack+0x3a/0x60 [ 2478.662881][ T1897] ? __kasan_record_aux_stack+0xb6/0xc0 [ 2478.668452][ T1897] dump_stack+0x15/0x24 [ 2478.672623][ T1897] should_fail_ex+0x3d4/0x520 [ 2478.677318][ T1897] should_fail_alloc_page+0x61/0x90 [ 2478.682534][ T1897] prepare_alloc_pages+0x148/0x5f0 [ 2478.687668][ T1897] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 2478.692885][ T1897] __alloc_pages+0x124/0x450 [ 2478.697501][ T1897] ? __cfi___alloc_pages+0x10/0x10 [ 2478.702637][ T1897] ? __kasan_check_read+0x11/0x20 [ 2478.707685][ T1897] ? call_rcu+0xb83/0xf90 [ 2478.712033][ T1897] __folio_alloc+0x12/0x40 [ 2478.716466][ T1897] handle_mm_fault+0x18ef/0x2640 [ 2478.721429][ T1897] ? __cfi_handle_mm_fault+0x10/0x10 [ 2478.726732][ T1897] ? lock_vma_under_rcu+0x3eb/0x4d0 [ 2478.731951][ T1897] ? ksys_read+0x71/0x240 [ 2478.736299][ T1897] ? ksys_read+0x110/0x240 [ 2478.740738][ T1897] do_user_addr_fault+0x905/0x1050 [ 2478.745876][ T1897] exc_page_fault+0x51/0xb0 [ 2478.750405][ T1897] asm_exc_page_fault+0x27/0x30 [ 2478.755279][ T1897] RIP: 0033:0x7fb0ab13c1eb [ 2478.759706][ T1897] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 2478.779329][ T1897] RSP: 002b:00007fb0ac07ce10 EFLAGS: 00010246 [ 2478.785415][ T1897] RAX: 00007fb0ac07ef30 RBX: 00007fb0ab397640 RCX: 0000000000000000 [ 2478.793395][ T1897] RDX: 00007fb0ac07ef78 RSI: 00007fb0ab1eeca8 RDI: 00007fb0ac07ce30 [ 2478.801375][ T1897] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 2478.809350][ T1897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2478.817332][ T1897] R13: 00007fb0ab3c6038 R14: 00007fb0ab3c5fa0 R15: 00007ffe79937cb8 [ 2478.825315][ T1897] [ 2478.838808][ T1897] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 2478.932381][ T1909] loop9: detected capacity change from 0 to 16 [ 2478.947009][ T1909] erofs: (device loop9): mounted with root inode @ nid 36. [ 2478.966612][ T1909] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 2478.986286][ T1909] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 2479.003955][ T1909] erofs: (device loop9): z_erofs_read_folio: failed to read, err [-117] [ 2479.085579][ T1912] ------------[ cut here ]------------ [ 2479.091139][ T1912] WARNING: CPU: 1 PID: 1912 at arch/x86/kvm/x86.c:11214 kvm_arch_vcpu_ioctl_run+0x1a8c/0x1fa0 [ 2479.101714][ T1912] Modules linked in: [ 2479.105634][ T1912] CPU: 1 PID: 1912 Comm: syz.0.9726 Not tainted syzkaller #0 [ 2479.113037][ T1912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2479.123120][ T1912] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1a8c/0x1fa0 [ 2479.129678][ T1912] Code: e8 59 60 a4 00 e9 a4 f2 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c ef e8 ff ff 4c 89 ff e8 de 5f a4 00 e9 e2 e8 ff ff e8 b4 fb 5f 00 <0f> 0b e9 93 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 09 ef [ 2479.149357][ T1912] RSP: 0018:ffffc90002a97bf8 EFLAGS: 00010287 [ 2479.155693][ T1912] RAX: ffffffff81100dac RBX: ffff888119c7c980 RCX: 0000000000080000 [ 2479.163745][ T1912] RDX: ffffc90006b29000 RSI: 0000000000000040 RDI: 0000000000000041 [ 2479.171940][ T1912] RBP: ffffc90002a97cb0 R08: dffffc0000000000 R09: ffffed1023397ca9 [ 2479.180137][ T1912] R10: ffffed1023397ca9 R11: 1ffff11023397ca8 R12: ffff888124008000 [ 2479.188266][ T1922] erofs: (device loop9): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 2479.188315][ T1922] syz.9.9727: attempt to access beyond end of device [ 2479.188315][ T1922] loop9: rw=0, sector=296, nr_sectors = 8 limit=16 [ 2479.197661][ T1912] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888119c7c9f8 [ 2479.197683][ T1912] FS: 00007f5421df76c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 2479.197704][ T1912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2479.224048][ T1922] erofs: (device loop9): z_erofs_read_folio: failed to read, err [-117] [ 2479.227804][ T1912] CR2: 0000001b2d31bff8 CR3: 000000012cb7c000 CR4: 00000000003526a0 [ 2479.227836][ T1912] Call Trace: [ 2479.241000][ T1922] erofs: (device loop9): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 2479.242809][ T1912] [ 2479.266610][ T1912] ? mutex_lock_killable+0x8d/0x1a0 [ 2479.271883][ T1912] ? __cfi_mutex_lock_killable+0x10/0x10 [ 2479.277553][ T1912] kvm_vcpu_ioctl+0x882/0xb70 [ 2479.282300][ T1912] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 2479.287555][ T1912] ? selinux_file_ioctl+0x377/0x480 [ 2479.292813][ T1912] ? __cfi_do_futex+0x10/0x10 [ 2479.297528][ T1912] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 2479.303146][ T1912] ? __fget_files+0x2d5/0x330 [ 2479.307852][ T1912] ? security_file_ioctl+0x95/0xc0 [ 2479.313110][ T1912] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 2479.318360][ T1912] __se_sys_ioctl+0x12f/0x1b0 [ 2479.323062][ T1912] __x64_sys_ioctl+0x7b/0x90 [ 2479.327682][ T1912] x64_sys_call+0x58b/0x9a0 [ 2479.332233][ T1912] do_syscall_64+0x4c/0xa0 [ 2479.336668][ T1912] ? clear_bhb_loop+0x30/0x80 [ 2479.341400][ T1912] ? clear_bhb_loop+0x30/0x80 [ 2479.346101][ T1912] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2479.352034][ T1912] RIP: 0033:0x7f542338ebe9 [ 2479.356634][ T1912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2479.376324][ T1912] RSP: 002b:00007f5421df7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2479.384830][ T1912] RAX: ffffffffffffffda RBX: 00007f54235c5fa0 RCX: 00007f542338ebe9 [ 2479.392849][ T1912] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2479.401031][ T1912] RBP: 00007f5423411e19 R08: 0000000000000000 R09: 0000000000000000 [ 2479.409104][ T1912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2479.417104][ T1912] R13: 00007f54235c6038 R14: 00007f54235c5fa0 R15: 00007ffee22db998 [ 2479.425137][ T1912] [ 2479.428206][ T1912] ---[ end trace 0000000000000000 ]--- [ 2479.514630][ T1927] FAULT_INJECTION: forcing a failure. [ 2479.514630][ T1927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2479.528047][ T1927] CPU: 1 PID: 1927 Comm: syz.7.9730 Tainted: G W syzkaller #0 [ 2479.536931][ T1927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2479.546983][ T1927] Call Trace: [ 2479.550257][ T1927] [ 2479.553181][ T1927] __dump_stack+0x21/0x24 [ 2479.557505][ T1927] dump_stack_lvl+0xee/0x150 [ 2479.562099][ T1927] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2479.567132][ T1927] dump_stack+0x15/0x24 [ 2479.571296][ T1927] should_fail_ex+0x3d4/0x520 [ 2479.576002][ T1927] should_fail+0xb/0x10 [ 2479.580167][ T1927] should_fail_usercopy+0x1a/0x20 [ 2479.585197][ T1927] _copy_from_user+0x1e/0xc0 [ 2479.588097][ T2339] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 2479.589796][ T1927] iovec_from_user+0x1aa/0x2e0 [ 2479.602210][ T1927] __import_iovec+0x71/0x470 [ 2479.606807][ T1927] import_iovec+0x7c/0xb0 [ 2479.611148][ T1927] do_readv+0x1fe/0x3e0 [ 2479.615301][ T1927] ? generic_file_rw_checks+0x2a0/0x2a0 [ 2479.620846][ T1927] ? __kasan_check_write+0x14/0x20 [ 2479.625965][ T1927] ? fput+0x154/0x1a0 [ 2479.629954][ T1927] ? debug_smp_processor_id+0x17/0x20 [ 2479.635335][ T1927] __x64_sys_readv+0x7d/0x90 [ 2479.639947][ T1927] x64_sys_call+0x3bd/0x9a0 [ 2479.644471][ T1927] do_syscall_64+0x4c/0xa0 [ 2479.648890][ T1927] ? clear_bhb_loop+0x30/0x80 [ 2479.653569][ T1927] ? clear_bhb_loop+0x30/0x80 [ 2479.658248][ T1927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2479.664138][ T1927] RIP: 0033:0x7fb0ab18ebe9 [ 2479.668546][ T1927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2479.688156][ T1927] RSP: 002b:00007fb0ac07f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2479.696598][ T1927] RAX: ffffffffffffffda RBX: 00007fb0ab3c5fa0 RCX: 00007fb0ab18ebe9 [ 2479.704571][ T1927] RDX: 0000000000000001 RSI: 00002000000008c0 RDI: 0000000000000005 [ 2479.712541][ T1927] RBP: 00007fb0ac07f090 R08: 0000000000000000 R09: 0000000000000000 [ 2479.720526][ T1927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2479.728496][ T1927] R13: 00007fb0ab3c6038 R14: 00007fb0ab3c5fa0 R15: 00007ffe79937cb8 [ 2479.736479][ T1927] [ 2479.788050][ T2339] usb 3-1: Using ep0 maxpacket: 16 [ 2479.796158][ T2339] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 2479.813605][ T2339] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2479.823409][ T2339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2479.831488][ T2339] usb 3-1: Product: syz [ 2479.835799][ T2339] usb 3-1: Manufacturer: syz [ 2479.845907][ T2339] usb 3-1: SerialNumber: syz [ 2479.937826][ T1946] FAULT_INJECTION: forcing a failure. [ 2479.937826][ T1946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2479.950934][ T1946] CPU: 1 PID: 1946 Comm: syz.4.9731 Tainted: G W syzkaller #0 [ 2479.959974][ T1946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2479.970058][ T1946] Call Trace: [ 2479.973346][ T1946] [ 2479.976298][ T1946] __dump_stack+0x21/0x24 [ 2479.980648][ T1946] dump_stack_lvl+0xee/0x150 [ 2479.985260][ T1946] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2479.990316][ T1946] dump_stack+0x15/0x24 [ 2479.994482][ T1946] should_fail_ex+0x3d4/0x520 [ 2479.999172][ T1946] should_fail+0xb/0x10 [ 2480.003344][ T1946] should_fail_usercopy+0x1a/0x20 [ 2480.008393][ T1946] _copy_from_user+0x1e/0xc0 [ 2480.013004][ T1946] __sys_bpf+0x277/0x780 [ 2480.017266][ T1946] ? bpf_link_show_fdinfo+0x320/0x320 [ 2480.022653][ T1946] ? fpregs_restore_userregs+0x128/0x260 [ 2480.028305][ T1946] __x64_sys_bpf+0x7c/0x90 [ 2480.032744][ T1946] x64_sys_call+0x488/0x9a0 [ 2480.037264][ T1946] do_syscall_64+0x4c/0xa0 [ 2480.041685][ T1946] ? clear_bhb_loop+0x30/0x80 [ 2480.046377][ T1946] ? clear_bhb_loop+0x30/0x80 [ 2480.051073][ T1946] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2480.056979][ T1946] RIP: 0033:0x7f357d98ebe9 [ 2480.061412][ T1946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2480.081033][ T1946] RSP: 002b:00007f357e73e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2480.089468][ T1946] RAX: ffffffffffffffda RBX: 00007f357dbc6180 RCX: 00007f357d98ebe9 [ 2480.097463][ T1946] RDX: 0000000000000010 RSI: 0000200000000500 RDI: 000000000000001d [ 2480.105458][ T1946] RBP: 00007f357e73e090 R08: 0000000000000000 R09: 0000000000000000 [ 2480.113448][ T1946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2480.121441][ T1946] R13: 00007f357dbc6218 R14: 00007f357dbc6180 R15: 00007ffc8fb7e648 [ 2480.129447][ T1946] [ 2480.136620][ T1918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9728'. [ 2480.159811][ T1918] device vlan2 entered promiscuous mode [ 2480.201527][ T28] audit: type=1400 audit(2480.188:4017): avc: denied { connect } for pid=1950 comm="syz.0.9737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2480.305119][ T2339] usb 3-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 2480.326070][ T2339] usb 3-1: found format II with max.bitrate = 3, frame size=7 [ 2480.341836][ T2339] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 2480.360145][ T2339] usb 3-1: USB disconnect, device number 103 [ 2480.749564][ T1962] syz.4.9739[1962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2480.749643][ T1962] syz.4.9739[1962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2482.600108][ T1976] loop9: detected capacity change from 0 to 2048 [ 2482.644289][ T1976] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 2482.817143][ T824] EXT4-fs (loop9): unmounting filesystem. [ 2483.211371][ T1991] loop9: detected capacity change from 0 to 1024 [ 2483.226360][ T1991] EXT4-fs: Ignoring removed nobh option [ 2483.240004][ T1991] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2483.289649][ T1991] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 2484.047703][ T2000] FAULT_INJECTION: forcing a failure. [ 2484.047703][ T2000] name failslab, interval 1, probability 0, space 0, times 0 [ 2484.060534][ T2000] CPU: 0 PID: 2000 Comm: syz.2.9745 Tainted: G W syzkaller #0 [ 2484.069401][ T2000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2484.079559][ T2000] Call Trace: [ 2484.082847][ T2000] [ 2484.085783][ T2000] __dump_stack+0x21/0x24 [ 2484.090122][ T2000] dump_stack_lvl+0xee/0x150 [ 2484.094730][ T2000] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2484.099777][ T2000] dump_stack+0x15/0x24 [ 2484.103940][ T2000] should_fail_ex+0x3d4/0x520 [ 2484.108642][ T2000] __should_failslab+0xac/0xf0 [ 2484.113426][ T2000] ? kvmalloc_node+0x294/0x480 [ 2484.118216][ T2000] should_failslab+0x9/0x20 [ 2484.122753][ T2000] __kmem_cache_alloc_node+0x3d/0x2c0 [ 2484.128232][ T2000] ? kvmalloc_node+0x294/0x480 [ 2484.133018][ T2000] __kmalloc_node+0xa1/0x1e0 [ 2484.137632][ T2000] kvmalloc_node+0x294/0x480 [ 2484.142242][ T2000] ? __cfi_kvmalloc_node+0x10/0x10 [ 2484.147371][ T2000] ? kstrtouint_from_user+0xf7/0x150 [ 2484.152680][ T2000] traverse+0xd6/0x560 [ 2484.156764][ T2000] ? mutex_lock+0x8d/0x1a0 [ 2484.161200][ T2000] seq_read_iter+0xcf2/0xdd0 [ 2484.165812][ T2000] vfs_read+0x41e/0x8c0 [ 2484.170005][ T2000] ? __cfi_vfs_read+0x10/0x10 [ 2484.174710][ T2000] ? __fget_files+0x2d5/0x330 [ 2484.179402][ T2000] ? __fdget+0x19c/0x220 [ 2484.183655][ T2000] ? __x64_sys_pread64+0xec/0x220 [ 2484.188707][ T2000] __x64_sys_pread64+0x191/0x220 [ 2484.193667][ T2000] ? __cfi___x64_sys_pread64+0x10/0x10 [ 2484.199148][ T2000] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 2484.205233][ T2000] x64_sys_call+0x4c7/0x9a0 [ 2484.209757][ T2000] do_syscall_64+0x4c/0xa0 [ 2484.214189][ T2000] ? clear_bhb_loop+0x30/0x80 [ 2484.218881][ T2000] ? clear_bhb_loop+0x30/0x80 [ 2484.223574][ T2000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2484.229481][ T2000] RIP: 0033:0x7f45d5f8ebe9 [ 2484.233910][ T2000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2484.253536][ T2000] RSP: 002b:00007f45d6e33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 2484.261970][ T2000] RAX: ffffffffffffffda RBX: 00007f45d61c6180 RCX: 00007f45d5f8ebe9 [ 2484.269952][ T2000] RDX: 00000000000000cf RSI: 0000200000000400 RDI: 0000000000000004 [ 2484.277933][ T2000] RBP: 00007f45d6e33090 R08: 0000000000000000 R09: 0000000000000000 [ 2484.285914][ T2000] R10: 00000000000004eb R11: 0000000000000246 R12: 0000000000000001 [ 2484.293894][ T2000] R13: 00007f45d61c6218 R14: 00007f45d61c6180 R15: 00007ffe9fe20208 [ 2484.301880][ T2000] [ 2484.501855][ T1963] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9740'. [ 2484.512654][ T1963] device vlan2 entered promiscuous mode [ 2484.564377][ T824] EXT4-fs (loop9): unmounting filesystem. [ 2485.044086][ T2011] loop9: detected capacity change from 0 to 1024 [ 2485.050933][ T2011] EXT4-fs: Ignoring removed orlov option [ 2485.069898][ T2011] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 2485.097269][ T824] EXT4-fs (loop9): unmounting filesystem. [ 2485.103202][ T28] audit: type=1400 audit(2485.078:4018): avc: denied { remove_name } for pid=824 comm="syz-executor" name="lost+found" dev="loop9" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2485.127200][ T28] audit: type=1400 audit(2485.078:4019): avc: denied { rmdir } for pid=824 comm="syz-executor" name="lost+found" dev="loop9" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2485.149450][ T28] audit: type=1400 audit(2485.078:4020): avc: denied { unlink } for pid=824 comm="syz-executor" name="file0" dev="loop9" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2485.178127][ T28] audit: type=1400 audit(2485.078:4021): avc: denied { unlink } for pid=824 comm="syz-executor" name="file1" dev="loop9" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 2485.398563][ T2019] FAULT_INJECTION: forcing a failure. [ 2485.398563][ T2019] name failslab, interval 1, probability 0, space 0, times 0 [ 2485.411991][ T2019] CPU: 0 PID: 2019 Comm: syz.4.9755 Tainted: G W syzkaller #0 [ 2485.420870][ T2019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2485.430949][ T2019] Call Trace: [ 2485.434248][ T2019] [ 2485.437181][ T2019] __dump_stack+0x21/0x24 [ 2485.441532][ T2019] dump_stack_lvl+0xee/0x150 [ 2485.446144][ T2019] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2485.451183][ T2019] dump_stack+0x15/0x24 [ 2485.455338][ T2019] should_fail_ex+0x3d4/0x520 [ 2485.460029][ T2019] ? getname_flags+0xb9/0x500 [ 2485.464724][ T2019] __should_failslab+0xac/0xf0 [ 2485.469497][ T2019] should_failslab+0x9/0x20 [ 2485.473991][ T2019] kmem_cache_alloc+0x3b/0x330 [ 2485.478748][ T2019] getname_flags+0xb9/0x500 [ 2485.483271][ T2019] user_path_at_empty+0x30/0x1c0 [ 2485.488219][ T2019] do_utimes+0x138/0x2a0 [ 2485.492460][ T2019] ? __cfi_do_utimes+0x10/0x10 [ 2485.497220][ T2019] __x64_sys_utime+0x12a/0x1d0 [ 2485.501983][ T2019] ? __cfi___x64_sys_utime+0x10/0x10 [ 2485.507263][ T2019] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 2485.513320][ T2019] x64_sys_call+0x14e/0x9a0 [ 2485.517825][ T2019] do_syscall_64+0x4c/0xa0 [ 2485.522248][ T2019] ? clear_bhb_loop+0x30/0x80 [ 2485.526933][ T2019] ? clear_bhb_loop+0x30/0x80 [ 2485.531626][ T2019] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2485.537526][ T2019] RIP: 0033:0x7f357d98ebe9 [ 2485.541973][ T2019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2485.561587][ T2019] RSP: 002b:00007f357e780038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 2485.570017][ T2019] RAX: ffffffffffffffda RBX: 00007f357dbc5fa0 RCX: 00007f357d98ebe9 [ 2485.578014][ T2019] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 2485.586013][ T2019] RBP: 00007f357e780090 R08: 0000000000000000 R09: 0000000000000000 [ 2485.593990][ T2019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2485.601965][ T2019] R13: 00007f357dbc6038 R14: 00007f357dbc5fa0 R15: 00007ffc8fb7e648 [ 2485.609950][ T2019] [ 2485.613750][ T2023] syz.9.9753[2023] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2485.613818][ T2023] syz.9.9753[2023] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2486.035081][ T28] audit: type=1400 audit(2486.018:4022): avc: denied { connect } for pid=2035 comm="syz.7.9761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2486.068125][ T28] audit: type=1400 audit(2486.018:4023): avc: denied { getopt } for pid=2035 comm="syz.7.9761" laddr=fe80::11 lport=269 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2486.263412][ T2043] loop9: detected capacity change from 0 to 16 [ 2486.271460][ T2043] erofs: (device loop9): mounted with root inode @ nid 36. [ 2487.145953][ T2043] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 2487.313567][ T28] audit: type=1400 audit(2487.298:4024): avc: denied { relabelfrom } for pid=2048 comm="syz.7.9765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2487.336393][ T2043] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 2487.349456][ T2043] erofs: (device loop9): z_erofs_read_folio: failed to read, err [-117] [ 2487.357939][ T28] audit: type=1400 audit(2487.318:4025): avc: denied { relabelto } for pid=2048 comm="syz.7.9765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2487.676681][ T2052] FAULT_INJECTION: forcing a failure. [ 2487.676681][ T2052] name failslab, interval 1, probability 0, space 0, times 0 [ 2487.689370][ T2052] CPU: 1 PID: 2052 Comm: syz.4.9764 Tainted: G W syzkaller #0 [ 2487.698238][ T2052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2487.708568][ T2052] Call Trace: [ 2487.711859][ T2052] [ 2487.714795][ T2052] __dump_stack+0x21/0x24 [ 2487.719135][ T2052] dump_stack_lvl+0xee/0x150 [ 2487.723839][ T2052] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2487.728890][ T2052] dump_stack+0x15/0x24 [ 2487.733057][ T2052] should_fail_ex+0x3d4/0x520 [ 2487.737755][ T2052] ? getname_flags+0xb9/0x500 [ 2487.742455][ T2052] __should_failslab+0xac/0xf0 [ 2487.747233][ T2052] should_failslab+0x9/0x20 [ 2487.751754][ T2052] kmem_cache_alloc+0x3b/0x330 [ 2487.756540][ T2052] ? __cfi_push_rt_tasks+0x10/0x10 [ 2487.761666][ T2052] getname_flags+0xb9/0x500 [ 2487.766191][ T2052] getname+0x19/0x20 [ 2487.770106][ T2052] do_sys_openat2+0xcb/0x7e0 [ 2487.774715][ T2052] ? do_sys_open+0xe0/0xe0 [ 2487.779147][ T2052] ? release_firmware_map_entry+0x194/0x194 [ 2487.785054][ T2052] ? ksys_write+0x1eb/0x240 [ 2487.789581][ T2052] __x64_sys_openat+0x136/0x160 [ 2487.794451][ T2052] x64_sys_call+0x783/0x9a0 [ 2487.798973][ T2052] do_syscall_64+0x4c/0xa0 [ 2487.803429][ T2052] ? clear_bhb_loop+0x30/0x80 [ 2487.808124][ T2052] ? clear_bhb_loop+0x30/0x80 [ 2487.812837][ T2052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2487.818831][ T2052] RIP: 0033:0x7f357d98ebe9 [ 2487.823255][ T2052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2487.842876][ T2052] RSP: 002b:00007f357e73e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2487.851305][ T2052] RAX: ffffffffffffffda RBX: 00007f357dbc6180 RCX: 00007f357d98ebe9 [ 2487.859291][ T2052] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c [ 2487.867274][ T2052] RBP: 00007f357e73e090 R08: 0000000000000000 R09: 0000000000000000 [ 2487.875258][ T2052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2487.883244][ T2052] R13: 00007f357dbc6218 R14: 00007f357dbc6180 R15: 00007ffc8fb7e648 [ 2487.891242][ T2052] [ 2488.129408][ T2056] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9767'. [ 2488.385571][ T2075] syz.2.9774[2075] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2488.385653][ T2075] syz.2.9774[2075] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2488.430692][ T2076] erofs: (device loop9): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 2488.451486][ T2076] syz.9.9763: attempt to access beyond end of device [ 2488.451486][ T2076] loop9: rw=0, sector=296, nr_sectors = 8 limit=16 [ 2488.464579][ T2076] erofs: (device loop9): z_erofs_read_folio: failed to read, err [-117] [ 2488.472952][ T2076] erofs: (device loop9): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 2489.215470][ T2085] FAULT_INJECTION: forcing a failure. [ 2489.215470][ T2085] name failslab, interval 1, probability 0, space 0, times 0 [ 2489.292574][ T2085] CPU: 1 PID: 2085 Comm: syz.2.9776 Tainted: G W syzkaller #0 [ 2489.301475][ T2085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2489.311546][ T2085] Call Trace: [ 2489.314837][ T2085] [ 2489.317778][ T2085] __dump_stack+0x21/0x24 [ 2489.322159][ T2085] dump_stack_lvl+0xee/0x150 [ 2489.326785][ T2085] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2489.331841][ T2085] dump_stack+0x15/0x24 [ 2489.336019][ T2085] should_fail_ex+0x3d4/0x520 [ 2489.340720][ T2085] __should_failslab+0xac/0xf0 [ 2489.345505][ T2085] should_failslab+0x9/0x20 [ 2489.350024][ T2085] kmem_cache_alloc_node+0x42/0x340 [ 2489.355244][ T2085] ? __alloc_skb+0xea/0x4b0 [ 2489.359776][ T2085] __alloc_skb+0xea/0x4b0 [ 2489.364133][ T2085] tcp_stream_alloc_skb+0x47/0x360 [ 2489.369280][ T2085] tcp_sendmsg_locked+0xd10/0x3d90 [ 2489.374411][ T2085] ? avc_has_perm+0x158/0x240 [ 2489.379110][ T2085] ? _raw_spin_lock_bh+0x8e/0xe0 [ 2489.384099][ T2085] ? __local_bh_enable_ip+0x58/0x80 [ 2489.389315][ T2085] ? __cfi_tcp_sendmsg_locked+0x10/0x10 [ 2489.394885][ T2085] tcp_sendmsg+0x2f/0x50 [ 2489.399151][ T2085] inet_sendmsg+0xb6/0xd0 [ 2489.403506][ T2085] __sys_sendto+0x464/0x5e0 [ 2489.408042][ T2085] ? __cfi___sys_sendto+0x10/0x10 [ 2489.413089][ T2085] ? ksys_write+0x1eb/0x240 [ 2489.417618][ T2085] ? __cfi_ksys_write+0x10/0x10 [ 2489.422522][ T2085] __x64_sys_sendto+0xe5/0x100 [ 2489.427330][ T2085] x64_sys_call+0x83/0x9a0 [ 2489.431773][ T2085] do_syscall_64+0x4c/0xa0 [ 2489.436242][ T2085] ? clear_bhb_loop+0x30/0x80 [ 2489.440939][ T2085] ? clear_bhb_loop+0x30/0x80 [ 2489.445640][ T2085] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2489.451573][ T2085] RIP: 0033:0x7f45d5f8ebe9 [ 2489.456003][ T2085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2489.475632][ T2085] RSP: 002b:00007f45d6e75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2489.484072][ T2085] RAX: ffffffffffffffda RBX: 00007f45d61c5fa0 RCX: 00007f45d5f8ebe9 [ 2489.492056][ T2085] RDX: 0000000000001d4c RSI: 0000200000000580 RDI: 0000000000000003 [ 2489.500037][ T2085] RBP: 00007f45d6e75090 R08: 0000000000000000 R09: 0000000000000000 [ 2489.508009][ T2085] R10: 0000000010048095 R11: 0000000000000246 R12: 0000000000000001 [ 2489.515998][ T2085] R13: 00007f45d61c6038 R14: 00007f45d61c5fa0 R15: 00007ffe9fe20208 [ 2489.523977][ T2085] [ 2489.542812][ T2092] FAULT_INJECTION: forcing a failure. [ 2489.542812][ T2092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2489.556093][ T2092] CPU: 0 PID: 2092 Comm: syz.4.9778 Tainted: G W syzkaller #0 [ 2489.564961][ T2092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2489.575030][ T2092] Call Trace: [ 2489.578320][ T2092] [ 2489.581267][ T2092] __dump_stack+0x21/0x24 [ 2489.585618][ T2092] dump_stack_lvl+0xee/0x150 [ 2489.590232][ T2092] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2489.595280][ T2092] ? __kasan_check_write+0x14/0x20 [ 2489.600413][ T2092] ? proc_fail_nth_write+0x17a/0x1f0 [ 2489.605716][ T2092] dump_stack+0x15/0x24 [ 2489.609968][ T2092] should_fail_ex+0x3d4/0x520 [ 2489.614670][ T2092] should_fail+0xb/0x10 [ 2489.618846][ T2092] should_fail_usercopy+0x1a/0x20 [ 2489.623977][ T2092] _copy_from_user+0x1e/0xc0 [ 2489.628582][ T2092] get_itimerspec64+0x9e/0x2e0 [ 2489.633369][ T2092] ? __cfi_vfs_write+0x10/0x10 [ 2489.638168][ T2092] ? __cfi_get_itimerspec64+0x10/0x10 [ 2489.643575][ T2092] ? __kasan_check_write+0x14/0x20 [ 2489.648715][ T2092] ? mutex_unlock+0x89/0x220 [ 2489.653325][ T2092] ? __cfi_mutex_unlock+0x10/0x10 [ 2489.658374][ T2092] __x64_sys_timer_settime+0x14f/0x250 [ 2489.663853][ T2092] ? fput+0x154/0x1a0 [ 2489.667851][ T2092] ? __cfi___x64_sys_timer_settime+0x10/0x10 [ 2489.673849][ T2092] ? ksys_write+0x1eb/0x240 [ 2489.678400][ T2092] ? __cfi_ksys_write+0x10/0x10 [ 2489.683278][ T2092] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 2489.689353][ T2092] x64_sys_call+0x3c4/0x9a0 [ 2489.693864][ T2092] do_syscall_64+0x4c/0xa0 [ 2489.698283][ T2092] ? clear_bhb_loop+0x30/0x80 [ 2489.702972][ T2092] ? clear_bhb_loop+0x30/0x80 [ 2489.707665][ T2092] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2489.713570][ T2092] RIP: 0033:0x7f357d98ebe9 [ 2489.717985][ T2092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2489.737680][ T2092] RSP: 002b:00007f357e780038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 2489.746107][ T2092] RAX: ffffffffffffffda RBX: 00007f357dbc5fa0 RCX: 00007f357d98ebe9 [ 2489.754077][ T2092] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 2489.762066][ T2092] RBP: 00007f357e780090 R08: 0000000000000000 R09: 0000000000000000 [ 2489.770041][ T2092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2489.778021][ T2092] R13: 00007f357dbc6038 R14: 00007f357dbc5fa0 R15: 00007ffc8fb7e648 [ 2489.786000][ T2092] [ 2490.144819][ T2115] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9786'. [ 2490.179711][ T2116] syz.7.9787[2116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2490.179798][ T2116] syz.7.9787[2116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2490.198025][T31553] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 2490.418011][T31553] usb 10-1: Using ep0 maxpacket: 16 [ 2490.424590][T31553] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 2490.437261][T31553] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2490.446590][T31553] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2490.454752][T31553] usb 10-1: Product: syz [ 2490.459171][T31553] usb 10-1: Manufacturer: syz [ 2490.463923][T31553] usb 10-1: SerialNumber: syz [ 2490.671247][ T2098] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9781'. [ 2490.682143][ T2098] device vlan2 entered promiscuous mode [ 2490.732426][T31553] usb 10-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 2490.741111][T31553] usb 10-1: found format II with max.bitrate = 3, frame size=7 [ 2490.748739][T31553] usb 10-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 2490.757001][T31553] usb 10-1: USB disconnect, device number 46 [ 2491.627169][ T28] audit: type=1400 audit(2491.608:4026): avc: denied { create } for pid=2133 comm="syz.0.9793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2492.118443][ T2152] FAULT_INJECTION: forcing a failure. [ 2492.118443][ T2152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2492.131563][ T2152] CPU: 0 PID: 2152 Comm: syz.7.9795 Tainted: G W syzkaller #0 [ 2492.140431][ T2152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2492.150507][ T2152] Call Trace: [ 2492.153890][ T2152] [ 2492.156839][ T2152] __dump_stack+0x21/0x24 [ 2492.161195][ T2152] dump_stack_lvl+0xee/0x150 [ 2492.165812][ T2152] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2492.170957][ T2152] dump_stack+0x15/0x24 [ 2492.175140][ T2152] should_fail_ex+0x3d4/0x520 [ 2492.179843][ T2152] should_fail+0xb/0x10 [ 2492.184037][ T2152] should_fail_usercopy+0x1a/0x20 [ 2492.189098][ T2152] _copy_to_user+0x1e/0x90 [ 2492.193548][ T2152] simple_read_from_buffer+0xe9/0x160 [ 2492.198947][ T2152] proc_fail_nth_read+0x19a/0x210 [ 2492.203989][ T2152] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2492.209560][ T2152] ? security_file_permission+0x94/0xb0 [ 2492.215129][ T2152] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2492.220691][ T2152] vfs_read+0x26e/0x8c0 [ 2492.224877][ T2152] ? __cfi_vfs_read+0x10/0x10 [ 2492.229581][ T2152] ? __kasan_check_write+0x14/0x20 [ 2492.234723][ T2152] ? mutex_lock+0x8d/0x1a0 [ 2492.239157][ T2152] ? __cfi_mutex_lock+0x10/0x10 [ 2492.244045][ T2152] ? __fdget_pos+0x2cd/0x380 [ 2492.248648][ T2152] ? ksys_read+0x71/0x240 [ 2492.253008][ T2152] ksys_read+0x140/0x240 [ 2492.257278][ T2152] ? __cfi_ksys_read+0x10/0x10 [ 2492.262071][ T2152] ? debug_smp_processor_id+0x17/0x20 [ 2492.267469][ T2152] __x64_sys_read+0x7b/0x90 [ 2492.272000][ T2152] x64_sys_call+0x2f/0x9a0 [ 2492.276443][ T2152] do_syscall_64+0x4c/0xa0 [ 2492.280978][ T2152] ? clear_bhb_loop+0x30/0x80 [ 2492.285685][ T2152] ? clear_bhb_loop+0x30/0x80 [ 2492.290363][ T2152] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2492.296268][ T2152] RIP: 0033:0x7fb0ab18d5fc [ 2492.300677][ T2152] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2492.320366][ T2152] RSP: 002b:00007fb0ac05e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2492.328786][ T2152] RAX: ffffffffffffffda RBX: 00007fb0ab3c6090 RCX: 00007fb0ab18d5fc [ 2492.336778][ T2152] RDX: 000000000000000f RSI: 00007fb0ac05e0a0 RDI: 0000000000000009 [ 2492.344757][ T2152] RBP: 00007fb0ac05e090 R08: 0000000000000000 R09: 0000000000000000 [ 2492.352739][ T2152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2492.360720][ T2152] R13: 00007fb0ab3c6128 R14: 00007fb0ab3c6090 R15: 00007ffe79937cb8 [ 2492.368708][ T2152] [ 2492.413634][ T2158] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9799'. [ 2492.512289][ T2165] syz.0.9801[2165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2492.512364][ T2165] syz.0.9801[2165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2493.374453][ T2170] loop9: detected capacity change from 0 to 128 [ 2493.603338][ T2170] syz.9.9798: attempt to access beyond end of device [ 2493.603338][ T2170] loop9: rw=2049, sector=225, nr_sectors = 128 limit=128 [ 2493.628527][ T2169] syz.9.9798: attempt to access beyond end of device [ 2493.628527][ T2169] loop9: rw=2049, sector=225, nr_sectors = 128 limit=128 [ 2493.825108][ T2173] FAULT_INJECTION: forcing a failure. [ 2493.825108][ T2173] name failslab, interval 1, probability 0, space 0, times 0 [ 2493.842543][ T2176] FAULT_INJECTION: forcing a failure. [ 2493.842543][ T2176] name failslab, interval 1, probability 0, space 0, times 0 [ 2493.928569][ T2173] CPU: 0 PID: 2173 Comm: syz.4.9803 Tainted: G W syzkaller #0 [ 2493.937476][ T2173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2493.947548][ T2173] Call Trace: [ 2493.950850][ T2173] [ 2493.953802][ T2173] __dump_stack+0x21/0x24 [ 2493.958153][ T2173] dump_stack_lvl+0xee/0x150 [ 2493.962776][ T2173] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2493.967834][ T2173] dump_stack+0x15/0x24 [ 2493.972017][ T2173] should_fail_ex+0x3d4/0x520 [ 2493.976719][ T2173] ? getname_flags+0xb9/0x500 [ 2493.981422][ T2173] __should_failslab+0xac/0xf0 [ 2493.986210][ T2173] should_failslab+0x9/0x20 [ 2493.990722][ T2173] kmem_cache_alloc+0x3b/0x330 [ 2493.995523][ T2173] ? mutex_unlock+0x89/0x220 [ 2494.000130][ T2173] getname_flags+0xb9/0x500 [ 2494.004663][ T2173] user_path_at_empty+0x30/0x1c0 [ 2494.009620][ T2173] do_sys_truncate+0xa3/0x190 [ 2494.014305][ T2173] ? __cfi_do_sys_truncate+0x10/0x10 [ 2494.019599][ T2173] ? debug_smp_processor_id+0x17/0x20 [ 2494.024994][ T2173] __x64_sys_truncate+0x5b/0x70 [ 2494.029856][ T2173] x64_sys_call+0x679/0x9a0 [ 2494.034387][ T2173] do_syscall_64+0x4c/0xa0 [ 2494.038808][ T2173] ? clear_bhb_loop+0x30/0x80 [ 2494.043507][ T2173] ? clear_bhb_loop+0x30/0x80 [ 2494.048206][ T2173] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2494.054120][ T2173] RIP: 0033:0x7f357d98ebe9 [ 2494.058549][ T2173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2494.078165][ T2173] RSP: 002b:00007f357e780038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 2494.086588][ T2173] RAX: ffffffffffffffda RBX: 00007f357dbc5fa0 RCX: 00007f357d98ebe9 [ 2494.094583][ T2173] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 2494.102567][ T2173] RBP: 00007f357e780090 R08: 0000000000000000 R09: 0000000000000000 [ 2494.110560][ T2173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2494.118546][ T2173] R13: 00007f357dbc6038 R14: 00007f357dbc5fa0 R15: 00007ffc8fb7e648 [ 2494.126541][ T2173] [ 2494.215940][ T2176] CPU: 0 PID: 2176 Comm: syz.0.9804 Tainted: G W syzkaller #0 [ 2494.224848][ T2176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2494.234913][ T2176] Call Trace: [ 2494.238195][ T2176] [ 2494.241133][ T2176] __dump_stack+0x21/0x24 [ 2494.245488][ T2176] dump_stack_lvl+0xee/0x150 [ 2494.250133][ T2176] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2494.255170][ T2176] ? avc_has_extended_perms+0x95f/0xdc0 [ 2494.260730][ T2176] dump_stack+0x15/0x24 [ 2494.264892][ T2176] should_fail_ex+0x3d4/0x520 [ 2494.269582][ T2176] __should_failslab+0xac/0xf0 [ 2494.274362][ T2176] ? __get_vm_area_node+0x12c/0x360 [ 2494.279572][ T2176] should_failslab+0x9/0x20 [ 2494.284076][ T2176] __kmem_cache_alloc_node+0x3d/0x2c0 [ 2494.289466][ T2176] ? do_vfs_ioctl+0xc36/0x1c80 [ 2494.294236][ T2176] ? __get_vm_area_node+0x12c/0x360 [ 2494.299472][ T2176] kmalloc_node_trace+0x26/0xb0 [ 2494.304335][ T2176] __get_vm_area_node+0x12c/0x360 [ 2494.309372][ T2176] __vmalloc_node_range+0x326/0x13d0 [ 2494.314657][ T2176] ? kvm_dev_ioctl+0x19c/0x11f0 [ 2494.319526][ T2176] ? __cfi___vmalloc_node_range+0x10/0x10 [ 2494.325244][ T2176] ? __cfi_snprintf+0x10/0x10 [ 2494.329919][ T2176] ? alloc_fd+0x4e6/0x590 [ 2494.334254][ T2176] ? kvm_dev_ioctl+0x19c/0x11f0 [ 2494.339114][ T2176] __vmalloc+0x79/0x90 [ 2494.343197][ T2176] ? kvm_dev_ioctl+0x19c/0x11f0 [ 2494.348069][ T2176] kvm_dev_ioctl+0x19c/0x11f0 [ 2494.352760][ T2176] ? __fget_files+0x2d5/0x330 [ 2494.357459][ T2176] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 2494.362582][ T2176] ? security_file_ioctl+0x95/0xc0 [ 2494.367697][ T2176] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 2494.372836][ T2176] __se_sys_ioctl+0x12f/0x1b0 [ 2494.377515][ T2176] __x64_sys_ioctl+0x7b/0x90 [ 2494.382131][ T2176] x64_sys_call+0x58b/0x9a0 [ 2494.386730][ T2176] do_syscall_64+0x4c/0xa0 [ 2494.391147][ T2176] ? clear_bhb_loop+0x30/0x80 [ 2494.395833][ T2176] ? clear_bhb_loop+0x30/0x80 [ 2494.400518][ T2176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2494.406423][ T2176] RIP: 0033:0x7f542338ebe9 [ 2494.410852][ T2176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2494.430482][ T2176] RSP: 002b:00007f5421df7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2494.438903][ T2176] RAX: ffffffffffffffda RBX: 00007f54235c5fa0 RCX: 00007f542338ebe9 [ 2494.446877][ T2176] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 2494.454872][ T2176] RBP: 00007f5421df7090 R08: 0000000000000000 R09: 0000000000000000 [ 2494.462843][ T2176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2494.470814][ T2176] R13: 00007f54235c6038 R14: 00007f54235c5fa0 R15: 00007ffee22db998 [ 2494.478797][ T2176] [ 2494.494704][T14827] kworker/u4:208: attempt to access beyond end of device [ 2494.494704][T14827] loop9: rw=1, sector=353, nr_sectors = 688 limit=128 [ 2494.545229][ T2176] syz.0.9804: vmalloc error: size 41016, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 2494.572379][ T2176] CPU: 0 PID: 2176 Comm: syz.0.9804 Tainted: G W syzkaller #0 [ 2494.581276][ T2176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2494.591358][ T2176] Call Trace: [ 2494.594663][ T2176] [ 2494.597618][ T2176] __dump_stack+0x21/0x24 [ 2494.601973][ T2176] dump_stack_lvl+0xee/0x150 [ 2494.606601][ T2176] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2494.611666][ T2176] dump_stack+0x15/0x24 [ 2494.615845][ T2176] warn_alloc+0x1b0/0x1d0 [ 2494.620202][ T2176] ? should_failslab+0x9/0x20 [ 2494.624896][ T2176] ? __cfi_warn_alloc+0x10/0x10 [ 2494.629782][ T2176] ? kmalloc_node_trace+0x3d/0xb0 [ 2494.634833][ T2176] ? __get_vm_area_node+0x353/0x360 [ 2494.640056][ T2176] __vmalloc_node_range+0x34b/0x13d0 [ 2494.645356][ T2176] ? __cfi___vmalloc_node_range+0x10/0x10 [ 2494.651083][ T2176] ? __cfi_snprintf+0x10/0x10 [ 2494.655759][ T2176] ? alloc_fd+0x4e6/0x590 [ 2494.660096][ T2176] ? kvm_dev_ioctl+0x19c/0x11f0 [ 2494.664963][ T2176] __vmalloc+0x79/0x90 [ 2494.669034][ T2176] ? kvm_dev_ioctl+0x19c/0x11f0 [ 2494.673901][ T2176] kvm_dev_ioctl+0x19c/0x11f0 [ 2494.678590][ T2176] ? __fget_files+0x2d5/0x330 [ 2494.683268][ T2176] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 2494.688391][ T2176] ? security_file_ioctl+0x95/0xc0 [ 2494.693507][ T2176] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 2494.698625][ T2176] __se_sys_ioctl+0x12f/0x1b0 [ 2494.703302][ T2176] __x64_sys_ioctl+0x7b/0x90 [ 2494.707897][ T2176] x64_sys_call+0x58b/0x9a0 [ 2494.712405][ T2176] do_syscall_64+0x4c/0xa0 [ 2494.716824][ T2176] ? clear_bhb_loop+0x30/0x80 [ 2494.721505][ T2176] ? clear_bhb_loop+0x30/0x80 [ 2494.726184][ T2176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2494.732084][ T2176] RIP: 0033:0x7f542338ebe9 [ 2494.736534][ T2176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2494.756143][ T2176] RSP: 002b:00007f5421df7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2494.764558][ T2176] RAX: ffffffffffffffda RBX: 00007f54235c5fa0 RCX: 00007f542338ebe9 [ 2494.772535][ T2176] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 2494.780506][ T2176] RBP: 00007f5421df7090 R08: 0000000000000000 R09: 0000000000000000 [ 2494.788472][ T2176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2494.796445][ T2176] R13: 00007f54235c6038 R14: 00007f54235c5fa0 R15: 00007ffee22db998 [ 2494.804421][ T2176] [ 2494.840086][ T2176] Mem-Info: [ 2494.843230][ T2176] active_anon:12483 inactive_anon:68 isolated_anon:0 [ 2494.843230][ T2176] active_file:27192 inactive_file:3431 isolated_file:0 [ 2494.843230][ T2176] unevictable:0 dirty:851 writeback:0 [ 2494.843230][ T2176] slab_reclaimable:10804 slab_unreclaimable:73824 [ 2494.843230][ T2176] mapped:35715 shmem:5898 pagetables:571 [ 2494.843230][ T2176] sec_pagetables:0 bounce:0 [ 2494.843230][ T2176] kernel_misc_reclaimable:0 [ 2494.843230][ T2176] free:1495681 free_pcp:5583 free_cma:0 [ 2494.895462][ T2176] Node 0 active_anon:49932kB inactive_anon:272kB active_file:108768kB inactive_file:13724kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142860kB dirty:3404kB writeback:0kB shmem:23592kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:5516kB pagetables:2284kB sec_pagetables:0kB all_unreclaimable? no [ 2494.977618][ T2176] DMA32 free:2968532kB boost:0kB min:31288kB low:39108kB high:46928kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2974204kB mlocked:0kB bounce:0kB free_pcp:5672kB local_pcp:5672kB free_cma:0kB [ 2495.025926][ T2176] lowmem_reserve[]: 0 3932 3932 3932 [ 2495.031639][ T2176] Normal free:3012932kB boost:0kB min:42436kB low:53044kB high:63652kB reserved_highatomic:0KB active_anon:45380kB inactive_anon:272kB active_file:108768kB inactive_file:13716kB unevictable:0kB writepending:3308kB present:5242880kB managed:4026656kB mlocked:0kB bounce:0kB free_pcp:21968kB local_pcp:15800kB free_cma:0kB [ 2495.066794][ T2176] lowmem_reserve[]: 0 0 0 0 [ 2495.071393][ T2176] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 2*2048kB (M) 722*4096kB (M) = 2968532kB [ 2495.087137][ T2176] Normal: 357*4kB (UM) 513*8kB (UM) 714*16kB (UM) 847*32kB (UME) 557*64kB (UME) 365*128kB (UME) 110*256kB (UME) 76*512kB (UME) 38*1024kB (UM) 11*2048kB (UME) 671*4096kB (UM) = 3003356kB [ 2495.113943][ T2176] 38807 total pagecache pages [ 2495.118792][ T2176] 71 pages in swap cache [ 2495.123056][ T2176] Free swap = 124236kB [ 2495.127306][ T2176] Total swap = 124996kB [ 2495.131837][ T2176] 2097051 pages RAM [ 2495.135658][ T2176] 0 pages HighMem/MovableOnly [ 2495.141564][ T2176] 346836 pages reserved [ 2495.145810][ T2176] 0 pages cma reserved [ 2495.158024][ T3689] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 2495.217043][ T2201] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9813'. [ 2495.289053][ T2204] syz.0.9814[2204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2495.289142][ T2204] syz.0.9814[2204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2495.358021][ T3689] usb 10-1: Using ep0 maxpacket: 16 [ 2495.402302][ T3689] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 2495.438384][ T3689] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2495.465077][ T3689] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2495.489784][ T3689] usb 10-1: Product: syz [ 2495.504274][ T3689] usb 10-1: Manufacturer: syz [ 2495.518314][ T3689] usb 10-1: SerialNumber: syz [ 2495.743864][ T2185] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9807'. [ 2495.766948][ T2185] device vlan2 entered promiscuous mode [ 2495.912302][ T3689] usb 10-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 2495.925079][ T3689] usb 10-1: found format II with max.bitrate = 3, frame size=7 [ 2496.078032][ T3689] usb 10-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 2496.099204][ T3689] usb 10-1: USB disconnect, device number 47 [ 2496.285124][ T2210] mmap: syz.2.9816 (2210): VmData 17453056 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 2497.768091][ T2243] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9825'. [ 2498.217292][ T2253] loop9: detected capacity change from 0 to 1024 [ 2498.224220][ T2246] FAULT_INJECTION: forcing a failure. [ 2498.224220][ T2246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2498.224591][ T2253] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2498.246257][ T2253] EXT4-fs (loop9): can't mount with both data=journal and delalloc [ 2498.254382][ T2246] CPU: 1 PID: 2246 Comm: syz.4.9827 Tainted: G W syzkaller #0 [ 2498.256411][ T2254] FAULT_INJECTION: forcing a failure. [ 2498.256411][ T2254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2498.263256][ T2246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2498.263270][ T2246] Call Trace: [ 2498.263276][ T2246] [ 2498.263284][ T2246] __dump_stack+0x21/0x24 [ 2498.296856][ T2246] dump_stack_lvl+0xee/0x150 [ 2498.301469][ T2246] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2498.306511][ T2246] ? vfs_write+0x9d6/0xca0 [ 2498.310940][ T2246] dump_stack+0x15/0x24 [ 2498.315101][ T2246] should_fail_ex+0x3d4/0x520 [ 2498.319791][ T2246] should_fail+0xb/0x10 [ 2498.323961][ T2246] should_fail_usercopy+0x1a/0x20 [ 2498.329006][ T2246] _copy_from_user+0x1e/0xc0 [ 2498.333827][ T2246] __sys_bind+0x1d1/0x420 [ 2498.338191][ T2246] ? __cfi___sys_bind+0x10/0x10 [ 2498.343065][ T2246] ? __kasan_check_write+0x14/0x20 [ 2498.348197][ T2246] ? debug_smp_processor_id+0x17/0x20 [ 2498.353584][ T2246] __x64_sys_bind+0x7a/0x90 [ 2498.358100][ T2246] x64_sys_call+0x70c/0x9a0 [ 2498.362612][ T2246] do_syscall_64+0x4c/0xa0 [ 2498.367029][ T2246] ? clear_bhb_loop+0x30/0x80 [ 2498.371707][ T2246] ? clear_bhb_loop+0x30/0x80 [ 2498.376386][ T2246] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2498.382280][ T2246] RIP: 0033:0x7f357d98ebe9 [ 2498.386695][ T2246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2498.406305][ T2246] RSP: 002b:00007f357e780038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2498.414723][ T2246] RAX: ffffffffffffffda RBX: 00007f357dbc5fa0 RCX: 00007f357d98ebe9 [ 2498.422702][ T2246] RDX: 000000000000006e RSI: 0000200000000000 RDI: 0000000000000005 [ 2498.430704][ T2246] RBP: 00007f357e780090 R08: 0000000000000000 R09: 0000000000000000 [ 2498.438690][ T2246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2498.446667][ T2246] R13: 00007f357dbc6038 R14: 00007f357dbc5fa0 R15: 00007ffc8fb7e648 [ 2498.454651][ T2246] [ 2498.458525][ T2254] CPU: 0 PID: 2254 Comm: syz.0.9824 Tainted: G W syzkaller #0 [ 2498.467419][ T2254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2498.477504][ T2254] Call Trace: [ 2498.480808][ T2254] [ 2498.483752][ T2254] __dump_stack+0x21/0x24 [ 2498.488127][ T2254] dump_stack_lvl+0xee/0x150 [ 2498.492746][ T2254] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2498.497810][ T2254] ? vfs_write+0x9d6/0xca0 [ 2498.502254][ T2254] dump_stack+0x15/0x24 [ 2498.506427][ T2254] should_fail_ex+0x3d4/0x520 [ 2498.511133][ T2254] should_fail+0xb/0x10 [ 2498.515313][ T2254] should_fail_usercopy+0x1a/0x20 [ 2498.520358][ T2254] _copy_from_user+0x1e/0xc0 [ 2498.524971][ T2254] __sys_connect+0x132/0x420 [ 2498.529588][ T2254] ? __cfi___sys_connect+0x10/0x10 [ 2498.534729][ T2254] ? __kasan_check_write+0x14/0x20 [ 2498.539874][ T2254] ? debug_smp_processor_id+0x17/0x20 [ 2498.545280][ T2254] __x64_sys_connect+0x7a/0x90 [ 2498.550075][ T2254] x64_sys_call+0x88d/0x9a0 [ 2498.554595][ T2254] do_syscall_64+0x4c/0xa0 [ 2498.559175][ T2254] ? clear_bhb_loop+0x30/0x80 [ 2498.563975][ T2254] ? clear_bhb_loop+0x30/0x80 [ 2498.568676][ T2254] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2498.574613][ T2254] RIP: 0033:0x7f542338ebe9 [ 2498.579046][ T2254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2498.598702][ T2254] RSP: 002b:00007f5421db5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2498.607138][ T2254] RAX: ffffffffffffffda RBX: 00007f54235c6180 RCX: 00007f542338ebe9 [ 2498.615132][ T2254] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000009 [ 2498.623129][ T2254] RBP: 00007f5421db5090 R08: 0000000000000000 R09: 0000000000000000 [ 2498.631120][ T2254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2498.639111][ T2254] R13: 00007f54235c6218 R14: 00007f54235c6180 R15: 00007ffee22db998 [ 2498.647126][ T2254] [ 2499.243620][T31553] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 2499.295781][ T2265] syz.9.9829 (2265) used greatest stack depth: 19856 bytes left [ 2499.392728][ T2280] netlink: 'syz.9.9836': attribute type 4 has an invalid length. [ 2499.408142][ T2279] loop9: detected capacity change from 0 to 512 [ 2499.414759][ T28] audit: type=1400 audit(2499.398:4027): avc: denied { mounton } for pid=2278 comm="syz.9.9836" path="/90/file0" dev="tmpfs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 2499.437639][ T2279] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 2499.438034][T31553] usb 3-1: Using ep0 maxpacket: 16 [ 2499.447189][ T2279] EXT4-fs (loop9): orphan cleanup on readonly fs [ 2499.452414][T31553] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 2499.457447][ T2279] EXT4-fs error (device loop9): ext4_orphan_get:1400: inode #15: comm syz.9.9836: iget: bad i_size value: 360287970189639680 [ 2499.470271][T31553] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2499.481538][ T2279] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.9836: couldn't read orphan inode 15 (err -117) [ 2499.490509][T31553] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2499.502479][ T2279] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 2499.511642][T31553] usb 3-1: Product: syz [ 2499.520133][ T2279] EXT4-fs (loop9): unmounting filesystem. [ 2499.529797][T31553] usb 3-1: Manufacturer: syz [ 2499.529818][T31553] usb 3-1: SerialNumber: syz [ 2499.733278][ T2259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9830'. [ 2499.744207][T31553] usb 3-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 2499.752809][T31553] usb 3-1: found format II with max.bitrate = 3, frame size=7 [ 2499.760497][T31553] usb 3-1: 2:1: All rates were zero [ 2499.769300][T31553] usb 3-1: USB disconnect, device number 104 [ 2499.777357][ T2285] netlink: 36 bytes leftover after parsing attributes in process `syz.9.9837'. [ 2500.908763][ T2295] syz.2.9840[2295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2500.908940][ T2295] syz.2.9840[2295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2501.458319][ T2307] FAULT_INJECTION: forcing a failure. [ 2501.458319][ T2307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2501.482784][ T2307] CPU: 0 PID: 2307 Comm: syz.4.9846 Tainted: G W syzkaller #0 [ 2501.491637][ T2307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2501.501693][ T2307] Call Trace: [ 2501.504999][ T2307] [ 2501.507924][ T2307] __dump_stack+0x21/0x24 [ 2501.512281][ T2307] dump_stack_lvl+0xee/0x150 [ 2501.516879][ T2307] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2501.521940][ T2307] dump_stack+0x15/0x24 [ 2501.526092][ T2307] should_fail_ex+0x3d4/0x520 [ 2501.530771][ T2307] should_fail+0xb/0x10 [ 2501.534924][ T2307] should_fail_usercopy+0x1a/0x20 [ 2501.539943][ T2307] _copy_to_user+0x1e/0x90 [ 2501.544364][ T2307] simple_read_from_buffer+0xe9/0x160 [ 2501.549729][ T2307] proc_fail_nth_read+0x19a/0x210 [ 2501.554857][ T2307] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2501.560410][ T2307] ? security_file_permission+0x94/0xb0 [ 2501.565987][ T2307] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2501.571536][ T2307] vfs_read+0x26e/0x8c0 [ 2501.575707][ T2307] ? __cfi_vfs_read+0x10/0x10 [ 2501.580390][ T2307] ? __kasan_check_write+0x14/0x20 [ 2501.585508][ T2307] ? mutex_lock+0x8d/0x1a0 [ 2501.589933][ T2307] ? __cfi_mutex_lock+0x10/0x10 [ 2501.594791][ T2307] ? __fdget_pos+0x2cd/0x380 [ 2501.599374][ T2307] ? ksys_read+0x71/0x240 [ 2501.603713][ T2307] ksys_read+0x140/0x240 [ 2501.607959][ T2307] ? __cfi_ksys_read+0x10/0x10 [ 2501.612726][ T2307] ? __bpf_trace_sys_enter+0x62/0x70 [ 2501.618005][ T2307] __x64_sys_read+0x7b/0x90 [ 2501.622511][ T2307] x64_sys_call+0x2f/0x9a0 [ 2501.626927][ T2307] do_syscall_64+0x4c/0xa0 [ 2501.631343][ T2307] ? clear_bhb_loop+0x30/0x80 [ 2501.636031][ T2307] ? clear_bhb_loop+0x30/0x80 [ 2501.640720][ T2307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2501.646610][ T2307] RIP: 0033:0x7f357d98d5fc [ 2501.651040][ T2307] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2501.670664][ T2307] RSP: 002b:00007f357e780030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2501.679084][ T2307] RAX: ffffffffffffffda RBX: 00007f357dbc5fa0 RCX: 00007f357d98d5fc [ 2501.687052][ T2307] RDX: 000000000000000f RSI: 00007f357e7800a0 RDI: 0000000000000006 [ 2501.695019][ T2307] RBP: 00007f357e780090 R08: 0000000000000000 R09: 0000000000000000 [ 2501.702984][ T2307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2501.710946][ T2307] R13: 00007f357dbc6038 R14: 00007f357dbc5fa0 R15: 00007ffc8fb7e648 [ 2501.718914][ T2307] [ 2501.722957][ T2309] syz.2.9844[2309] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2501.723023][ T2309] syz.2.9844[2309] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2502.325237][ T28] audit: type=1400 audit(2502.308:4028): avc: denied { mounton } for pid=2330 comm="syz.9.9853" path="/95/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 2502.735431][ T28] audit: type=1400 audit(2502.718:4029): avc: denied { unmount } for pid=32647 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2502.822939][ T2345] binder: 2337:2345 ioctl c0306201 2000000003c0 returned -22 [ 2503.399234][ T2355] binder: 2348:2355 ioctl c0306201 2000000003c0 returned -22 [ 2504.448311][ T2363] syz.0.9861[2363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2504.448396][ T2363] syz.0.9861[2363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2504.488879][ T2365] syz.9.9859[2365] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2504.500288][ T2365] syz.9.9859[2365] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2504.795857][ T2361] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9858'. [ 2505.138023][ T1284] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 2505.164727][ T28] audit: type=1400 audit(2505.148:4030): avc: denied { append } for pid=2381 comm="syz.0.9868" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2505.339871][ T2382] loop9: detected capacity change from 0 to 8192 [ 2505.346480][ T28] audit: type=1400 audit(2505.178:4031): avc: denied { write } for pid=2381 comm="syz.0.9868" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2505.966231][ T2385] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2506.878478][ T1284] usb 5-1: Using ep0 maxpacket: 16 [ 2506.890290][ T1284] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 2507.675903][ T28] audit: type=1400 audit(2505.178:4032): avc: denied { ioctl } for pid=2381 comm="syz.0.9868" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2507.760662][ T1284] usb 5-1: string descriptor 0 read error: -71 [ 2507.766873][ T1284] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2507.798033][ T1284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2507.815384][ T1284] usb 5-1: can't set config #1, error -71 [ 2507.825941][ T1284] usb 5-1: USB disconnect, device number 60 [ 2508.535723][ T2409] binder: 2402:2409 ioctl c0306201 2000000003c0 returned -22 [ 2509.208358][ T2420] syz.4.9876[2420] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2509.208445][ T2420] syz.4.9876[2420] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2509.238313][ T2419] syz.7.9874[2419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2509.249737][ T2419] syz.7.9874[2419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2509.572682][ T2418] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9875'. [ 2509.600147][ T879] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 2509.788076][ T879] usb 3-1: Using ep0 maxpacket: 16 [ 2509.795163][ T879] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 2509.820947][ T2431] loop9: detected capacity change from 0 to 128 [ 2510.058608][ T2431] syz.9.9879: attempt to access beyond end of device [ 2510.058608][ T2431] loop9: rw=2049, sector=225, nr_sectors = 128 limit=128 [ 2510.089562][ T2431] syz.9.9879: attempt to access beyond end of device [ 2510.089562][ T2431] loop9: rw=2049, sector=225, nr_sectors = 128 limit=128 [ 2510.387222][ T879] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2510.903691][ T28] audit: type=1400 audit(2510.818:4033): avc: denied { execute_no_trans } for pid=2432 comm="syz.0.9882" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=7790 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2510.945215][ T879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2511.448667][T21191] kworker/u4:1: attempt to access beyond end of device [ 2511.448667][T21191] loop9: rw=1, sector=353, nr_sectors = 688 limit=128 [ 2512.461735][ T879] usb 3-1: Product: syz [ 2512.465959][ T879] usb 3-1: Manufacturer: syz [ 2512.598035][ T879] usb 3-1: SerialNumber: syz [ 2515.210005][ T2459] loop9: detected capacity change from 0 to 2048 [ 2515.216720][ T2459] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2515.223410][ T2459] ext4: Unknown parameter 'fsname' [ 2515.232272][ T879] usb 3-1: can't set config #1, error -71 [ 2515.248577][ T879] usb 3-1: USB disconnect, device number 105 [ 2516.235653][ T2472] binder: 2462:2472 ioctl c0306201 2000000003c0 returned -22 [ 2516.356352][ T2476] loop9: detected capacity change from 0 to 128 [ 2516.363026][ T2476] ext4: Unknown parameter 'mask' [ 2516.560620][ T2480] FAULT_INJECTION: forcing a failure. [ 2516.560620][ T2480] name failslab, interval 1, probability 0, space 0, times 0 [ 2516.573463][ T2480] CPU: 0 PID: 2480 Comm: syz.4.9894 Tainted: G W syzkaller #0 [ 2516.582345][ T2480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2516.592416][ T2480] Call Trace: [ 2516.595703][ T2480] [ 2516.598664][ T2480] __dump_stack+0x21/0x24 [ 2516.603007][ T2480] dump_stack_lvl+0xee/0x150 [ 2516.607630][ T2480] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2516.612691][ T2480] ? __kasan_check_write+0x14/0x20 [ 2516.617830][ T2480] dump_stack+0x15/0x24 [ 2516.621994][ T2480] should_fail_ex+0x3d4/0x520 [ 2516.626702][ T2480] ? getname_flags+0xb9/0x500 [ 2516.631413][ T2480] __should_failslab+0xac/0xf0 [ 2516.636203][ T2480] should_failslab+0x9/0x20 [ 2516.640723][ T2480] kmem_cache_alloc+0x3b/0x330 [ 2516.645512][ T2480] getname_flags+0xb9/0x500 [ 2516.650046][ T2480] getname+0x19/0x20 [ 2516.653962][ T2480] do_sys_openat2+0xcb/0x7e0 [ 2516.658577][ T2480] ? __kasan_check_write+0x14/0x20 [ 2516.663721][ T2480] ? do_sys_open+0xe0/0xe0 [ 2516.668151][ T2480] ? ksys_write+0x1eb/0x240 [ 2516.672680][ T2480] ? __cfi_ksys_write+0x10/0x10 [ 2516.677554][ T2480] __x64_sys_open+0x11c/0x140 [ 2516.682255][ T2480] x64_sys_call+0x97b/0x9a0 [ 2516.686779][ T2480] do_syscall_64+0x4c/0xa0 [ 2516.691215][ T2480] ? clear_bhb_loop+0x30/0x80 [ 2516.695909][ T2480] ? clear_bhb_loop+0x30/0x80 [ 2516.700625][ T2480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2516.706522][ T2480] RIP: 0033:0x7f357d98ebe9 [ 2516.710923][ T2480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2516.730640][ T2480] RSP: 002b:00007f357e780038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 2516.739052][ T2480] RAX: ffffffffffffffda RBX: 00007f357dbc5fa0 RCX: 00007f357d98ebe9 [ 2516.747105][ T2480] RDX: 0000000000200000 RSI: 0000000000000500 RDI: 0000200000000140 [ 2516.755075][ T2480] RBP: 00007f357e780090 R08: 0000000000000000 R09: 0000000000000000 [ 2516.763062][ T2480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2516.771050][ T2480] R13: 00007f357dbc6038 R14: 00007f357dbc5fa0 R15: 00007ffc8fb7e648 [ 2516.779046][ T2480] [ 2517.068309][ T2487] syz.7.9891[2487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2517.068397][ T2487] syz.7.9891[2487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2517.462258][ T2485] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9892'. [ 2518.638026][T19457] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 2518.818028][T19457] usb 10-1: Using ep0 maxpacket: 16 [ 2518.824305][T19457] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 2518.839914][T19457] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2518.858032][T19457] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2518.866163][T19457] usb 10-1: Product: syz [ 2518.874310][T19457] usb 10-1: Manufacturer: syz [ 2518.879059][T19457] usb 10-1: SerialNumber: syz [ 2519.132868][ T2503] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9900'. [ 2519.143987][T19457] usb 10-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 2519.152563][T19457] usb 10-1: found format II with max.bitrate = 3, frame size=7 [ 2519.160152][T19457] usb 10-1: 2:1: All rates were zero [ 2519.167571][T19457] usb 10-1: USB disconnect, device number 48 [ 2519.610983][ T28] audit: type=1400 audit(2519.598:4034): avc: denied { create } for pid=2518 comm="syz.2.9905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 2519.679190][ T28] audit: type=1400 audit(2519.668:4035): avc: denied { ioctl } for pid=2518 comm="syz.2.9905" path="socket:[126774]" dev="sockfs" ino=126774 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2520.662471][ T2524] binder: 2521:2524 ioctl c0306201 2000000003c0 returned -22 [ 2521.098338][ T2537] syz.2.9909[2537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2521.098426][ T2537] syz.2.9909[2537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2521.588346][ T2534] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9908'. [ 2521.771770][ T2501] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9898'. [ 2521.786178][ T2501] device vlan2 entered promiscuous mode [ 2521.982894][ T2509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9901'. [ 2521.995240][ T2509] device vlan2 entered promiscuous mode [ 2522.000874][ T2509] device gretap0 entered promiscuous mode [ 2527.324420][ T2551] loop9: detected capacity change from 0 to 2048 [ 2527.338968][ T2551] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2527.346400][ T2551] ext4: Unknown parameter 'fsname' [ 2527.528101][T12281] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 2527.873473][ T2571] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9920'. [ 2528.070964][ T2575] FAULT_INJECTION: forcing a failure. [ 2528.070964][ T2575] name failslab, interval 1, probability 0, space 0, times 0 [ 2528.083711][ T2575] CPU: 1 PID: 2575 Comm: syz.9.9919 Tainted: G W syzkaller #0 [ 2528.092678][ T2575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2528.102771][ T2575] Call Trace: [ 2528.106063][ T2575] [ 2528.109004][ T2575] __dump_stack+0x21/0x24 [ 2528.113350][ T2575] dump_stack_lvl+0xee/0x150 [ 2528.117961][ T2575] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2528.123009][ T2575] ? preempt_schedule_irq+0xbb/0x110 [ 2528.128312][ T2575] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 2528.134085][ T2575] dump_stack+0x15/0x24 [ 2528.138603][ T2575] should_fail_ex+0x3d4/0x520 [ 2528.143308][ T2575] ? getname_flags+0xb9/0x500 [ 2528.148009][ T2575] __should_failslab+0xac/0xf0 [ 2528.152788][ T2575] should_failslab+0x9/0x20 [ 2528.157302][ T2575] kmem_cache_alloc+0x3b/0x330 [ 2528.162091][ T2575] ? build_open_flags+0xf6/0x600 [ 2528.167090][ T2575] getname_flags+0xb9/0x500 [ 2528.171632][ T2575] getname+0x19/0x20 [ 2528.175596][ T2575] do_sys_openat2+0xcb/0x7e0 [ 2528.180208][ T2575] ? do_sys_open+0xe0/0xe0 [ 2528.184639][ T2575] ? release_firmware_map_entry+0x194/0x194 [ 2528.190551][ T2575] ? ksys_write+0x1eb/0x240 [ 2528.195073][ T2575] __x64_sys_openat+0x136/0x160 [ 2528.199942][ T2575] x64_sys_call+0x783/0x9a0 [ 2528.204459][ T2575] do_syscall_64+0x4c/0xa0 [ 2528.208893][ T2575] ? clear_bhb_loop+0x30/0x80 [ 2528.213583][ T2575] ? clear_bhb_loop+0x30/0x80 [ 2528.218272][ T2575] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2528.224170][ T2575] RIP: 0033:0x7fcc4558d550 [ 2528.228590][ T2575] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 2528.248207][ T2575] RSP: 002b:00007fcc43ff6f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2528.256637][ T2575] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcc4558d550 [ 2528.264620][ T2575] RDX: 0000000000000000 RSI: 00007fcc45611f06 RDI: 00000000ffffff9c [ 2528.272612][ T2575] RBP: 00007fcc45611f06 R08: 0000000000000000 R09: 0000000000000000 [ 2528.280593][ T2575] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2528.288572][ T2575] R13: 00007fcc457c6218 R14: 00007fcc457c6180 R15: 00007ffd6b4c3248 [ 2528.296566][ T2575] [ 2528.790000][ T28] audit: type=1400 audit(2528.778:4036): avc: denied { create } for pid=2570 comm="syz.0.9920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2529.305483][ T2579] overlayfs: missing 'lowerdir' [ 2529.399674][ T2584] syz.4.9922[2584] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2529.399757][ T2584] syz.4.9922[2584] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2529.452083][ T2579] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9921'. [ 2529.567582][ T2590] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9923'. [ 2530.759218][ T2597] loop9: detected capacity change from 0 to 128 [ 2533.627301][ T2595] syz.9.9925: attempt to access beyond end of device [ 2533.627301][ T2595] loop9: rw=2049, sector=225, nr_sectors = 128 limit=128 [ 2533.643402][ T2595] syz.9.9925: attempt to access beyond end of device [ 2533.643402][ T2595] loop9: rw=2049, sector=225, nr_sectors = 128 limit=128 [ 2534.465291][ T2605] FAULT_INJECTION: forcing a failure. [ 2534.465291][ T2605] name failslab, interval 1, probability 0, space 0, times 0 [ 2534.478417][ T2605] CPU: 0 PID: 2605 Comm: syz.4.9928 Tainted: G W syzkaller #0 [ 2534.487288][ T2605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2534.497360][ T2605] Call Trace: [ 2534.500655][ T2605] [ 2534.503594][ T2605] __dump_stack+0x21/0x24 [ 2534.507940][ T2605] dump_stack_lvl+0xee/0x150 [ 2534.512579][ T2605] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2534.517904][ T2605] ? call_rcu+0xb83/0xf90 [ 2534.522266][ T2605] ? exit_to_user_mode_loop+0x9b/0xb0 [ 2534.527665][ T2605] dump_stack+0x15/0x24 [ 2534.531851][ T2605] should_fail_ex+0x3d4/0x520 [ 2534.536558][ T2605] __should_failslab+0xac/0xf0 [ 2534.538457][ T28] audit: type=1400 audit(2533.818:4037): avc: denied { connect } for pid=2600 comm="syz.4.9928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2534.541338][ T2605] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 2534.566396][ T2605] should_failslab+0x9/0x20 [ 2534.570903][ T2605] __kmem_cache_alloc_node+0x3d/0x2c0 [ 2534.576277][ T2605] ? __cfi_mutex_lock+0x10/0x10 [ 2534.581128][ T2605] ? delete_node+0x2b3/0xa60 [ 2534.585740][ T2605] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 2534.591722][ T2605] __kmalloc+0xa1/0x1e0 [ 2534.595882][ T2605] ? __cfi___bpf_trace_sched_switch+0x10/0x10 [ 2534.601959][ T2605] tracepoint_probe_unregister+0x1e6/0x8b0 [ 2534.607770][ T2605] bpf_probe_unregister+0x61/0x70 [ 2534.612798][ T2605] bpf_raw_tp_link_release+0x63/0x90 [ 2534.618082][ T2605] bpf_link_free+0x13a/0x390 [ 2534.622677][ T2605] ? bpf_link_put_deferred+0x20/0x20 [ 2534.627973][ T2605] ? security_file_free+0xd8/0xf0 [ 2534.633014][ T2605] bpf_link_release+0x15f/0x170 [ 2534.637859][ T2605] ? __cfi_bpf_link_release+0x10/0x10 [ 2534.643232][ T2605] __fput+0x1fc/0x8f0 [ 2534.647220][ T2605] ____fput+0x15/0x20 [ 2534.651206][ T2605] task_work_run+0x1db/0x240 [ 2534.655811][ T2605] ? __cfi_task_work_run+0x10/0x10 [ 2534.660923][ T2605] ? __kasan_check_read+0x11/0x20 [ 2534.665951][ T2605] exit_to_user_mode_loop+0x9b/0xb0 [ 2534.671148][ T2605] exit_to_user_mode_prepare+0x5a/0xa0 [ 2534.676607][ T2605] syscall_exit_to_user_mode+0x1a/0x30 [ 2534.682070][ T2605] do_syscall_64+0x58/0xa0 [ 2534.686485][ T2605] ? clear_bhb_loop+0x30/0x80 [ 2534.691166][ T2605] ? clear_bhb_loop+0x30/0x80 [ 2534.695846][ T2605] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2534.701752][ T2605] RIP: 0033:0x7f357d98ebe9 [ 2534.706167][ T2605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2534.725777][ T2605] RSP: 002b:00007f357e73e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 2534.734201][ T2605] RAX: 0000000000000000 RBX: 00007f357dbc6180 RCX: 00007f357d98ebe9 [ 2534.742276][ T2605] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 2534.750432][ T2605] RBP: 00007f357e73e090 R08: 0000000000000000 R09: 0000000000000000 [ 2534.758412][ T2605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2534.766396][ T2605] R13: 00007f357dbc6218 R14: 00007f357dbc6180 R15: 00007ffc8fb7e648 [ 2534.774552][ T2605] [ 2534.779067][ T2586] CFI failure at __traceiter_sched_switch+0x9b/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69) [ 2534.790960][ T2586] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 2534.797131][ T2586] CPU: 1 PID: 2586 Comm: syz.7.9916 Tainted: G W syzkaller #0 [ 2534.806512][ T2586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2534.815057][ T2605] CFI failure at __traceiter_sched_switch+0x9b/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69) [ 2534.816595][ T2586] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 2534.834555][ T2586] Code: 80 3c 30 00 74 05 e8 e4 6b 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 2534.854165][ T2586] RSP: 0018:ffffc90000de71b0 EFLAGS: 00010096 [ 2534.860259][ T2586] RAX: 1ffff1102102f356 RBX: ffff888108179aa8 RCX: ffff888125f46540 [ 2534.868237][ T2586] RDX: ffff888110889440 RSI: 0000000000000001 RDI: ffffc900012ab000 [ 2534.876208][ T2586] RBP: ffffc90000de71f0 R08: 0000000000000000 R09: fffffbfff0ee4b9e [ 2534.884173][ T2586] R10: 00000000b720eca3 R11: 1ffffffff0ee4b9d R12: 0000000000000001 [ 2534.892138][ T2586] R13: ffff888108179aa8 R14: dffffc0000000000 R15: ffffffff817125b0 [ 2534.900104][ T2586] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 2534.909056][ T2586] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2534.915632][ T2586] CR2: 00007f903c034ab4 CR3: 0000000137c73000 CR4: 00000000003506a0 [ 2534.923603][ T2586] Call Trace: [ 2534.926887][ T2586] [ 2534.929812][ T2586] __schedule+0x1263/0x14e0 [ 2534.934313][ T2586] ? __cfi_free_unref_page_list+0x10/0x10 [ 2534.940031][ T2586] ? release_firmware_map_entry+0x194/0x194 [ 2534.945915][ T2586] ? release_pages+0xad1/0xb20 [ 2534.950686][ T2586] ? lru_add_drain_cpu+0x383/0x4b0 [ 2534.955800][ T2586] ? preempt_schedule+0xa7/0xb0 [ 2534.960641][ T2586] preempt_schedule_common+0x9b/0xf0 [ 2534.965930][ T2586] preempt_schedule+0xa7/0xb0 [ 2534.970599][ T2586] ? __cfi_preempt_schedule+0x10/0x10 [ 2534.975964][ T2586] ? folio_memcg_lock+0x19/0x1b0 [ 2534.980903][ T2586] ? unlock_page_memcg+0x115/0x130 [ 2534.986015][ T2586] preempt_schedule_thunk+0x16/0x18 [ 2534.991213][ T2586] _raw_spin_unlock+0x5f/0x70 [ 2534.995877][ T2586] unmap_page_range+0x20da/0x2310 [ 2535.000920][ T2586] ? __cfi_unmap_page_range+0x10/0x10 [ 2535.006290][ T2586] ? mas_find+0x155/0x370 [ 2535.010628][ T2586] unmap_vmas+0x31c/0x430 [ 2535.014969][ T2586] ? __cfi_unmap_vmas+0x10/0x10 [ 2535.019830][ T2586] ? __cfi_lru_add_drain_cpu+0x10/0x10 [ 2535.025298][ T2586] ? __kasan_check_write+0x14/0x20 [ 2535.030411][ T2586] exit_mmap+0x268/0xb60 [ 2535.034653][ T2586] ? __cfi_exit_mmap+0x10/0x10 [ 2535.039521][ T2586] ? __cfi_exit_aio+0x10/0x10 [ 2535.044193][ T2586] ? uprobe_clear_state+0x2c1/0x320 [ 2535.049393][ T2586] __mmput+0x93/0x320 [ 2535.053374][ T2586] ? mmput+0x43/0x150 [ 2535.057364][ T2586] mmput+0x4b/0x150 [ 2535.061167][ T2586] do_exit+0x981/0x2650 [ 2535.065330][ T2586] ? __cfi_do_exit+0x10/0x10 [ 2535.069933][ T2586] ? ___sys_recvmsg+0x1c1/0x510 [ 2535.074787][ T2586] ? __sys_recvmsg+0x270/0x270 [ 2535.079572][ T2586] ? __kasan_check_write+0x14/0x20 [ 2535.084717][ T2586] ? _raw_spin_lock_irq+0x8f/0xe0 [ 2535.089768][ T2586] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 2535.095315][ T2586] do_group_exit+0x210/0x2d0 [ 2535.099911][ T2586] ? __kasan_check_write+0x14/0x20 [ 2535.105044][ T2586] get_signal+0x13b5/0x1520 [ 2535.109563][ T2586] ? fput+0x154/0x1a0 [ 2535.113546][ T2586] arch_do_signal_or_restart+0xb0/0x1030 [ 2535.119178][ T2586] ? __sys_recvmmsg+0x280/0x280 [ 2535.124043][ T2586] ? do_futex+0x2dc/0x420 [ 2535.128453][ T2586] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 2535.134609][ T2586] ? __x64_sys_recvmmsg+0x18d/0x240 [ 2535.139810][ T2586] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 2535.145363][ T2586] exit_to_user_mode_loop+0x7a/0xb0 [ 2535.150590][ T2586] exit_to_user_mode_prepare+0x5a/0xa0 [ 2535.156061][ T2586] syscall_exit_to_user_mode+0x1a/0x30 [ 2535.161520][ T2586] do_syscall_64+0x58/0xa0 [ 2535.165946][ T2586] ? clear_bhb_loop+0x30/0x80 [ 2535.170619][ T2586] ? clear_bhb_loop+0x30/0x80 [ 2535.175378][ T2586] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2535.181266][ T2586] RIP: 0033:0x7fb0ab18ebe9 [ 2535.185676][ T2586] Code: Unable to access opcode bytes at 0x7fb0ab18ebbf. [ 2535.192687][ T2586] RSP: 002b:00007fb0ac05e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2535.201125][ T2586] RAX: 0000000000010106 RBX: 00007fb0ab3c6090 RCX: 00007fb0ab18ebe9 [ 2535.209127][ T2586] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2535.217126][ T2586] RBP: 00007fb0ab211e19 R08: 0000000000000000 R09: 0000000000000000 [ 2535.225098][ T2586] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 2535.233065][ T2586] R13: 00007fb0ab3c6128 R14: 00007fb0ab3c6090 R15: 00007ffe79937cb8 [ 2535.241038][ T2586] [ 2535.244056][ T2586] Modules linked in: [ 2535.247954][ T2586] ---[ end trace 0000000000000000 ]--- [ 2535.247991][ T2605] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 2535.253415][ T2586] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 2535.259487][ T2605] CPU: 0 PID: 2605 Comm: syz.4.9928 Tainted: G D W syzkaller #0 [ 2535.265635][ T2586] Code: 80 3c 30 00 74 05 e8 e4 6b 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 2535.274516][ T2605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2535.294113][ T2586] RSP: 0018:ffffc90000de71b0 EFLAGS: 00010096 [ 2535.304172][ T2605] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 2535.310232][ T2586] RAX: 1ffff1102102f356 RBX: ffff888108179aa8 RCX: ffff888125f46540 [ 2535.316371][ T2605] Code: 80 3c 30 00 74 05 e8 e4 6b 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 2535.324342][ T2586] RDX: ffff888110889440 RSI: 0000000000000001 RDI: ffffc900012ab000 [ 2535.343932][ T2605] RSP: 0018:ffffc9000075f830 EFLAGS: 00010096 [ 2535.351898][ T2586] RBP: ffffc90000de71f0 R08: 0000000000000000 R09: fffffbfff0ee4b9e [ 2535.357963][ T2605] RAX: 1ffff1102102f356 RBX: ffff888108179aa8 RCX: ffff88811bb09440 [ 2535.365939][ T2586] R10: 00000000b720eca3 R11: 1ffffffff0ee4b9d R12: 0000000000000001 [ 2535.373907][ T2605] RDX: ffff888126181440 RSI: 0000000000000000 RDI: ffffc900012ab000 [ 2535.381870][ T2586] R13: ffff888108179aa8 R14: dffffc0000000000 R15: ffffffff817125b0 [ 2535.389840][ T2605] RBP: ffffc9000075f870 R08: 0000000000000080 R09: fffffbfff0ee4b9e [ 2535.397805][ T2586] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 2535.405768][ T2605] R10: 00000000b720eca3 R11: 1ffffffff0ee4b9d R12: 0000000000000000 [ 2535.414704][ T2586] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2535.422669][ T2605] R13: ffff888108179aa8 R14: dffffc0000000000 R15: ffffffff817125b0 [ 2535.429269][ T2586] CR2: 00007f903c034ab4 CR3: 0000000137c73000 CR4: 00000000003506a0 [ 2535.437237][ T2605] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2535.445208][ T2586] Kernel panic - not syncing: Fatal exception [ 2535.454126][ T2605] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2535.454142][ T2605] CR2: 00007f357e75fd58 CR3: 0000000006e0f000 CR4: 00000000003506b0 [ 2535.454159][ T2605] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2535.454170][ T2605] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2535.454182][ T2605] Call Trace: [ 2535.454189][ T2605] [ 2535.454199][ T2605] __schedule+0x1263/0x14e0 [ 2535.454225][ T2605] ? release_firmware_map_entry+0x194/0x194 [ 2535.454244][ T2605] ? memcpy+0x56/0x70 [ 2535.454259][ T2605] ? __kasan_check_write+0x14/0x20 [ 2535.454287][ T2605] do_task_dead+0x9c/0xa0 [ 2535.454311][ T2605] do_exit+0x1baa/0x2650 [ 2535.454335][ T2605] ? do_syscall_64+0x58/0xa0 [ 2535.454353][ T2605] ? __cfi_do_exit+0x10/0x10 [ 2535.454379][ T2605] ? __kasan_check_write+0x14/0x20 [ 2535.454421][ T2605] ? _raw_spin_lock_irq+0x8f/0xe0 [ 2535.454445][ T2605] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 2535.454471][ T2605] do_group_exit+0x210/0x2d0 [ 2535.454493][ T2605] ? __kasan_check_write+0x14/0x20 [ 2535.454519][ T2605] get_signal+0x13b5/0x1520 [ 2535.454546][ T2605] arch_do_signal_or_restart+0xb0/0x1030 [ 2535.454569][ T2605] ? percpu_counter_add_batch+0x13c/0x160 [ 2535.454591][ T2605] ? __fput+0x66a/0x8f0 [ 2535.454610][ T2605] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 2535.454630][ T2605] ? blkcg_maybe_throttle_current+0x1df/0x9f0 [ 2535.454674][ T2605] exit_to_user_mode_loop+0x7a/0xb0 [ 2535.454693][ T2605] exit_to_user_mode_prepare+0x5a/0xa0 [ 2535.454712][ T2605] syscall_exit_to_user_mode+0x1a/0x30 [ 2535.454735][ T2605] do_syscall_64+0x58/0xa0 [ 2535.454751][ T2605] ? clear_bhb_loop+0x30/0x80 [ 2535.454771][ T2605] ? clear_bhb_loop+0x30/0x80 [ 2535.454792][ T2605] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2535.454812][ T2605] RIP: 0033:0x7f357d98ebe9 [ 2535.454827][ T2605] Code: Unable to access opcode bytes at 0x7f357d98ebbf. [ 2535.454836][ T2605] RSP: 002b:00007f357e73e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 2535.454855][ T2605] RAX: 0000000000000000 RBX: 00007f357dbc6180 RCX: 00007f357d98ebe9 [ 2535.454868][ T2605] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 2535.454881][ T2605] RBP: 00007f357e73e090 R08: 0000000000000000 R09: 0000000000000000 [ 2535.454893][ T2605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2535.454904][ T2605] R13: 00007f357dbc6218 R14: 00007f357dbc6180 R15: 00007ffc8fb7e648 [ 2535.454921][ T2605] [ 2535.454927][ T2605] Modules linked in: [ 2535.460996][ T2605] ---[ end trace 0000000000000000 ]--- [ 2535.461004][ T2605] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 2535.461026][ T2605] Code: 80 3c 30 00 74 05 e8 e4 6b 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 2535.461042][ T2605] RSP: 0018:ffffc90000de71b0 EFLAGS: 00010096 [ 2535.461056][ T2605] RAX: 1ffff1102102f356 RBX: ffff888108179aa8 RCX: ffff888125f46540 [ 2535.461070][ T2605] RDX: ffff888110889440 RSI: 0000000000000001 RDI: ffffc900012ab000 [ 2535.461083][ T2605] RBP: ffffc90000de71f0 R08: 0000000000000000 R09: fffffbfff0ee4b9e [ 2535.461095][ T2605] R10: 00000000b720eca3 R11: 1ffffffff0ee4b9d R12: 0000000000000001 [ 2535.461108][ T2605] R13: ffff888108179aa8 R14: dffffc0000000000 R15: ffffffff817125b0 [ 2535.461121][ T2605] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2535.461137][ T2605] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2535.461150][ T2605] CR2: 00007f357e75fd58 CR3: 0000000006e0f000 CR4: 00000000003506b0 [ 2535.461166][ T2605] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2535.461177][ T2605] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2536.639478][ T2586] Shutting down cpus with NMI [ 2536.994431][ T2586] Kernel Offset: disabled [ 2536.998753][ T2586] Rebooting in 86400 seconds..